NCSC launches Cyber Adversary Simulation scheme for critical UK organisations
Assured suppliers run customer-specific attack plans so operators of essential services can test prevention, detection and response.
Stories per day · 30 days
5 RSS
Relatedsandbox-escape2active-directory1adversary-simulation1anthropic1attack-reuse1browser-exploit1chrome1claude1credential-dumping1critical-infrastructure1data-exposure1dora1eternalblue1eu1file-share1financial-sector1gpt-61kata-containers1
31 stories, newest first · one card per story
Stories tagged #red-team
Pen tester says tobacco firm left recipes on an open file share
The share allowed anonymous SMB access to every employee; the company denied the recipes were real, then the files disappeared.
ARES AI Red Team Platform Automates 66 Attack Modules
Open-core ARES tool releases 66 MITRE ATT&CK modules for Active Directory and cloud red team testing.
2
Unreleased Claude built exploit chains for Chrome, Safari, and major OSes
Anthropic says the model made five exploits, including Android data theft and Linux root code execution; vendors have patched.
Pen test: domain-joined Windows 7 server yielded domain admin via EternalBlue
A leetspeak insult password was a real domain admin credential; the outdated domain-joined machine, not a weak password, was the entry point.
1
Tensor Trust players reused prompt injections that broke their defenses
Within a week, targets reused 10.0% of successful attacks versus 0.03% of matched attacks that never reached them.
OpenAI says research agents escaped sandboxes in red-team tests
Internal agents reached the internet through a DNS misconfiguration and chained flaws, including a Kata Containers escape fixed in 3.27.0.
4
DORA TLPT Requirements Explained: Where Threat Intelligence Fits
DORA requires selected EU financial firms to run threat-led penetration tests at least every three years.
Decepticon – Autonomous Red Team Agent that Integrates Claude and Codex
Open-source Decepticon red team agent links Claude Code and Codex to a LangGraph runtime for scoped attack-path testing.
14
New Agentic AI Red Team Checklist Adds 222 Tests Across 20 Attack Categories
Researcher Ravi Rajput released 222 agentic-AI red-team tests across 20 categories, mapped to OWASP and MITRE ATLAS.
5
Cisco Talos Warns Autonomous AI Agents Could Turn Pentests Into Stealthy Red Team Attacks
Cisco Talos warns autonomous AI agents may shift from noisy scans to stealthy, persistent intrusions.
7
Anthropic Opens Claude’s Advanced Cyber Capabilities to Verified Red Teams With Reduced Restrictions
Anthropic expanded its Cyber Verification Program, giving vetted red teams Claude models with fewer cybersecurity restrictions.
5
One breach, please, and make no mistakes
Cisco Talos says AI agent swarms already attack infrastructure and defenders must rehearse quieter campaigns.
Armadin raises $255.5 million to expand AI offensive security platform
Armadin raised a $255.5 million Series B to scale its AI offensive security platform.
Quoting Anthropic Frontier Red Team
Anthropic says GLM-5.3 and Claude Mythos Preview now achieve binary control-flow hijacks.
RemoteThreat Launches With $7 Million for Offensive Operations Platform
RemoteThreat launched with $7 million pre-seed for an offensive operations platform combining C2, implants, initial access, and governed AI workflows.
1
Former X-Force hackers chase the offensive cyber gold rush
Ex-IBM X-Force leaders launched RemoteThreat, a $7 million AI offensive-cyber startup for vetted enterprises and government.
4
One company is at the center of a wave of rogue AI attacks
Irregular says one sandbox mistake sent OpenAI, Meta, Anthropic, and Google agents at real targets.
Google to critical infra orgs: Our AI scanners won't be evil, promise
Google and Wiz launch Scan for Good, using Gemini 3.8 Flash Cyber and Red Agent to autonomously find critical vulnerabilities in hospitals, transit, and municipalities.
EvilVM: Forth shellcode
EvilVM is a 5-10KB position-independent Forth shellcode that provides a remote interactive shell.
Adversary simulation: what you need to know
UK NCSC publishes guidance on adversary simulation, comparing full spectrum and assumed breach approaches across prerequisites, testing, and reporting phases.
1
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
Filigran introduces Attack Chaining in OpenAEV to continuously simulate multi-stage attack paths, exposing gaps that isolated MITRE ATT&CK technique testing misses.
4
Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster
SecurityWeek interviews Bishop Fox CEO Vinnie Liu, recruited by the NSA at 17 in 1999, on hacker ethics, intent, and his career.
2
PrivEscalate: Measuring and Augmenting the Threat of LLM-Automated Linux Privilege Escalation
Researchers release PrivEscalate, a 531-scenario benchmark showing LLM agents' Linux privilege-escalation success varies by vulnerability class, plus PrivEscAgent, a domain-specialized agent that boosts success.