30
Test environment let anyone access live customer data
A security audit found an internet-exposed staging environment connected to live customer data, lacking production-grade authentication and access controls.
The Register's PWNED column recounts how Richard Schut, now of SmartRepl, discovered during a pre-cloud-migration audit that a mid-size company's test environment was externally accessible and wired to a database with live customer information. The staging instance, created for a short-term demo and migration testing, remained running for six months without production authentication. Access was restricted after discovery and the team reviewed all other test environments.
18
30
30
30
Your Critical Vulnerabilities Might Not Be Your Biggest Risk
Autonomous penetration testing advocates prioritize exploitable attack paths over raw vulnerability severity for continuous security validation.
The article argues that scanner severity scores lack context: a critical flaw behind strong segmentation may be low priority, while a medium flaw on internet-facing systems can provide a foothold chained toward sensitive data. It positions autonomous penetration testing and attack path validation as the execution layer for continuous security validation, replacing point-in-time assessments. The piece is vendor-authored thought leadership rather than incident or vulnerability news.
18
55
55
30
42
55
55
30
30
55
55
55
55
30
55
55
30
55
55
Splunk announces platform updates to address the complexities of multi-cloud and hybrid environments
30
55
30
30
30
30
C3 launches the Integrated Development Studio, a low-code/no-code environment for enterprise AI apps
30
30
30
55
30
55
30
30
55
Cybersecurity jobs available right now: March 31, 2026
Help Net Security's job roundup lists cybersecurity vacancies worldwide, from malware research director to SOC, IAM, and GRC roles, mostly already closed.
The roundup aggregates cybersecurity openings across Israel, Ireland, India, the UK, Australia, France, Germany, Canada, the US and the UAE. Roles include Android malware research director, cloud security engineer, IAM analyst, SOC lead, GRC specialist, and vulnerability management positions at employers such as Iceland Foods, Pernod Ricard, A10 Networks, and TOMRA. Most listings were marked as no longer accepting applications at publication.
10