Horizon3 links NodeZero to Torq fixes and ECB guidance

Horizon3 linked NodeZero attack-path findings to Torq remediation and later said it can evidence banks’ ECB cybersecurity alignment.

Horizon3.ai and Torq announced an integration that sends NodeZero autonomous penetration-test findings into Torq’s AI SOC platform for enrichment, remediation, and retesting. NodeZero chains vulnerabilities, misconfigurations, and credentials from an assumed-breach foothold or the external perimeter into reachable paths across network, cloud, identity, and Active Directory; Torq can add ownership and impact context and orchestrate credential resets, host isolation, cloud-access restrictions, and tickets. The sources disagree on verification scope: the 14 October brief treats a scoped retest as confirming a path is closed, while the 15 October post says 1-Click Verify checks one weakness and a full pentest is required before claiming an entire path is closed. Both frame that material as a vendor partnership announcement, not a vulnerability disclosure. A 16 October Horizon3 brief separately argues NodeZero can help banks evidence alignment with six European Central Bank cybersecurity supervisory focus areas—attack-surface protection, patching, monitoring, governance, hygiene, and resilience—using a promotional example rather than a newly disclosed incident.

• Horizon3.ai and Torq published a joint brief linking NodeZero autonomous pentesting to Torq’s AI SOC for remediation and retesting.
• NodeZero reports reachable paths from an assumed-breach position or the external perimeter across network, cloud, identity, and Active Directory.
• Torq workflows can reset credentials, isolate hosts, restrict cloud access, and open tickets with ownership and impact context.
• Sources disagree: a scoped retest is described as confirming a path is closed, while 1-Click Verify covers one weakness and a full pentest is required before claiming an entire path is closed.
• The Torq posts are a vendor partnership announcement, not a vulnerability disclosure.
• On 2026-10-16 Horizon3 said NodeZero can map infrastructure, cloud, identity, and web-application testing to six ECB supervisory focus areas for banks.
• The ECB brief’s example path from an exposed application configuration file to domain compromise is a promotional Tier-1 financial-services illustration, not a newly disclosed incident.