CFOtech New Zealand - Technology news for CFOs & financial decision-makers
New Zealand

Penetration testing Stories

Global Stories

Penetration testing stories

Horizon3 & Deloitte forge cyber resilience alliance
Hybrid Cloud

Horizon3 & Deloitte forge cyber resilience alliance

Australian and New Zealand businesses face greater pressure to prove cyber controls work as the firms back continuous testing over periodic reviews.

By Joseph Gabriel Lagonsin • 4 min read • Yesterday
Public exploit code targets Cudy router flaw chain
Network Security

Public exploit code targets Cudy router flaw chain

Patching is urgent for Cudy WR3000 rev 2.0 routers, as public code shows how two flaws can let attackers gain root command execution.

By Sean Mitchell • 5 min read • Yesterday
UltraViolet Cyber names Andrew Park as security chief
DevOps

UltraViolet Cyber names Andrew Park as security chief

The appointment gives UltraViolet Cyber a CISO who knows its operations from the client side and will steer AI governance and internal security.

By Mark Tarre • 4 min read • Yesterday
Barracuda finds average web app has 20 security flaws
Digital Transformation

Barracuda finds average web app has 20 security flaws

Basic security lapses are leaving web apps exposed, with Barracuda saying routine misconfigurations account for most of 20 flaws per site.

By Sean Mitchell • 3 min read • Last week
AI models expose new attack surfaces through misconfiguration
Ransomware

AI models expose new attack surfaces through misconfiguration

Misconfigured models are giving attackers a fresh route into cloud systems, raising the risk of data theft and service compromise.

By Anthony Caruana • 5 min read • Last week
Cudy router flaws could allow root command execution
Network Security

Cudy router flaws could allow root command execution

Owners of certain Cudy WR3000 routers face a root takeover risk unless they update firmware to patch two chained flaws.

By Sean Mitchell • 5 min read • Last week
Google Cloud unveils AI harness that finds flaws fast
Cloud Security

Google Cloud unveils AI harness that finds flaws fast

In two days, the system uncovered more than 100 critical bugs in stolen code repositories, outpacing manual review and aiding incident response.

By Mark Tarre • 5 min read • Last week
NASA lab console flaw allows unauthorised commands
Space

NASA lab console flaw allows unauthorised commands

Unauthorised access could let attackers send arbitrary commands to spacecraft and instruments via NASA's AIT-GUI console, now fixed in version 2.5.2.

By Sean Mitchell • 4 min read • Last week
Datavault AI agrees USD $94.5m CyberCatch takeover
Data Protection

Datavault AI agrees USD $94.5m CyberCatch takeover

CyberCatch's continuous compliance tools will be folded into Datavault AI's data platforms if the all-cash deal wins approvals.

By Karen Joy Bacudo • 4 min read • Last week
When AI memory, simulation and provenance collide
Security Information and Event Management

When AI memory, simulation and provenance collide

Realistic-looking security evidence can be fabricated when memory, simulation and model hallucinations blur provenance in AI workflows.

By Arjun • 5 min read • This month
OpenAI expands Daybreak with specialist cyber model
Risk & Compliance

OpenAI expands Daybreak with specialist cyber model

Approved defenders will gain broader access to cyber tools as the new tiered Daybreak programme adds GPT-5.6-Cyber for advanced security work.

By Mark Tarre • 4 min read • This month
Liverton Security wins CREST ANZ member company status
Data Protection

Liverton Security wins CREST ANZ member company status

Customers in Australia and New Zealand may now see Liverton Security as a lower-risk supplier after the Wellington firm won CREST ANZ membership.

By Sean Mitchell • 4 min read • This month
AI patches fail to fix flaws, 1Password study finds
Application Security

AI patches fail to fix flaws, 1Password study finds

Security teams should treat AI patching with caution after 53.9% of 6,080 model-generated fixes failed or introduced new flaws.

By Mark Tarre • 4 min read • This month

Stories from Other Regions

Penetration testing stories

Why penetration testing must move at the speed of attackers
Data Protection

Why penetration testing must move at the speed of attackers

Stolen credentials can become an operational foothold within hours, leaving annual assessments too slow to catch the real attack paths.

By Patrick Dannacher • 6 min read • Last week
Payward joins Anthropic's AI cyber defence project
Fintech

Payward joins Anthropic's AI cyber defence project

The move gives the crypto exchange's security team AI help to hunt flaws in critical code as threats to financial infrastructure grow.

By Karen Joy Bacudo • 4 min read • Last week
Mindgard raises USD $30 million to boost AI security
Data Protection

Mindgard raises USD $30 million to boost AI security

Customer demand is helping the Boston and London startup expand as enterprises race to secure AI systems against fresh attack risks.

By Karen Joy Bacudo • 3 min read • Last week
Autonomous AI agents hit Asian government in four-day breach
Robotics

Autonomous AI agents hit Asian government in four-day breach

Up to 85 government accounts were compromised in a four-day campaign that also reached nuclear and energy organisations, researchers said.

By Joseph Gabriel Lagonsin • 4 min read • This month
ITSEC launches cybersecurity & AI academy in Jakarta
Data Protection

ITSEC launches cybersecurity & AI academy in Jakarta

Indonesia's digital skills gap is fuelling demand for practical cyber and AI training, as firms struggle to hire workers.

By Sofiah Nichole Salivio • 5 min read • This month