Connect with us

Science & Technology

Cybersecurity Expert Calls for Increased Penetration Testing

Published

on

[ad_1]

Keith Poyser: “Blind faith in cyber defence systems without constantly putting them to the test is naive.”

London, October 22 2024 – Penetration testing, i.e. the self-assessment of a company’s IT infrastructure to test its cyber resilience, is too often neglected in the business world, warns Keith Poyser, Vice President for EMEA at security company Horizon3.ai. He explains: “You only know how resilient an IT network really is to cyberattacks if you put it to the test. Only penetration tests can determine whether hackers can penetrate from the outside or whether an organisation is actually protected against cyber criminals.”

The security expert cites findings from the Government’s Cyber Security Breaches Survey 2024, which reveals that 50% of businesses experienced a cyber breach or attack in the past 12 months—a figure that climbs to 70% for medium businesses and 74% for large enterprises. While over 70% of organisations have implemented key security measures such as anti-malware, EDR, DLP, password policies, backups and firewalls, Poyser warns that they underestimate how easily cyber criminals can bypass these defences by exploiting vulnerabilities through social engineering, unpatched software, misconfigurations, poor credential security, and insider threats.

He adds: “Many organisations rely on dozens of cyber defence tools, assuming they are fully protected against external and internal attacks. But this is like flying blind, trusting that everything will work perfectly without active testing. And human led testing only delivers a static snapshot, of a small part of the estate. It may work in calm conditions, but it’s naive to think that a purely defensive strategy can withstand the relentless and evolving nature of modern cyber threats.” The security expert urges organisations to adopt a more proactive, automated penetration testing approach in defending against cyber attacks. By doing so, companies can better safeguard their systems, ensure best ROI from their existing investments, and show their boards they are “more secure this week than last week” to meet compliance and regulatory requirements.

Keith Poyser: “Human Risk Is Often Neglected”

According to the Government’s Cyber Security Breaches Survey 2024, a staggering 95% of cyberattacks succeed because of human error – whether it’s opening phishing emails or using weak passwords. While identifying technical vulnerabilities and software flaws is critical, neglecting the human factor leaves organisations equally exposed. Both technical and human vulnerabilities must be addressed to ensure a comprehensive cyber defence. Keith Poyser explains: “Hackers generally analyse all
publicly available information about a company, its employees and even former employees on social networks, for example, in order to track down security-relevant information.”

Furthermore, he cites “configuration errors due to ignorance or oversight in the defence systems” as another frequently encountered consequence of human weaknesses. “With a myriad of security programmes running at the same time, organisations have often lost track of their associated configurations. The need to constantly update security software alone can be overwhelming for many corporate IT teams, not so much in terms of expertise, but in terms of workload. With each update, the entire configuration has to be re-examined, as the interaction of different systems can lead to new vulnerabilities as soon as one component changes even slightly.”

Given the significant effort required, Poyser recommends that organisations adopt autonomous penetration testing platforms, as they are safer and more cost-effective than relying on traditional teams of experts. He clarifies: “Of course, we still need as many highly qualified specialists as possible, but at the same time we need to increase the level of automation in penetration testing as much as possible in order to cope with the constantly growing threat situation.”

This recommendation is closely aligned with Poyser’s work at Horizon3.ai, which offers NodeZero, a cloud-based penetration testing platform. This solution enables companies to conduct simulated cyberattacks on their internal, external, cloud, and hybrid IT infrastructures, providing a comprehensive assessment of their cyber resilience.

Even the ‘Demilitarised Zone’ Is No Longer Safe

The frequency and depth of penetration testing are crucial to a robust cybersecurity strategy. It’s not just the external perimeter of IT networks that requires comprehensive testing, but also the internal security. The security expert explains: “With remote work, the Internet of Things, and mobile access, more devices are connecting to company networks from external locations, increasing the potential attack surface. Modern security strategies must assume that hackers will breach the outer defences and gain initial access to a network segment, from which they can then launch internal attacks.”

Even the so-called ‘demilitarised zone’ (DMZ), which is considered particularly trustworthy because it is shielded several times from other network segments, can no longer be classified as a secure area in Poyser’s experience. “A modern penetration test can examine the entire company network in all its ramifications, internal, external and cloud attack surfaces” he emphasises. “It’s not just about identifying vulnerabilities, but also assessing their potential impact. For instance, if a break-in to the DMZ exposes the entire network to a hacker, a thorough penetration test will highlight this risk, allowing for immediate and targeted remediation. Repeated automated tests will allow you to find, fix and verify.”

A Shift in Perspective: The Key to Effective Security

While achieving 100% protection is impossible, this era of machine speed attacks means traditional approaches won’t solve the problem. Simply upgrading defence systems isn’t enough though. To truly safeguard against evolving threats, organisations are advised to regularly assess their security through ongoing machine speed, automated penetration tests. Only by continuously testing and evaluating their defences can organisations stay one step ahead and ensure their systems remain secure, reducing risk and cost.

Poyser, Vice President for EMEA at security company Horizon3.ai, urges companies to “conduct penetration tests regularly to consistently monitor and strengthen their cyber resilience.” He adds, “I recommend that every board member, managing director, and IT manager across all industries subject their company to this critical assessment, given the current threat landscape.”

* https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2024/cyber-security-breaches-survey-2024

About Horizon3.ai and NodeZero™: Horizon3.ai’s NodeZero™ Autonomous Security Platform offers integrated threat detection, autonomous pentesting, third-party risk management, and comprehensive governance, risk, and compliance (GRC) insights. It enhances organisational security by proactively identifying and remediating exploitable vulnerabilities, while strategically deploying deception and threat detection through NodeZero Tripwires™. Founded in 2019 by former industry leaders and U.S. National Security veterans, Horizon3.ai is at the forefront of cybersecurity innovation. Request a free demonstration at: www.horizon3.ai.

Trademark notice: NodeZero is a trademark of Horizon3.ai

Further information:
Horizon3.AI Europe GmbH, Sebastian-Kneipp-Str. 41, 60439 Frankfurt am Main, Web: www.horizon3.ai

PR Agency: euromarcom public relations GmbH, Tel. +49 611 973150, Web: www.euromarcom.de, E-Mail: [email protected]

[ad_2]

Source link

Science & Technology

Momentum Builds to Curb AI Development Amid Safety Concerns

Tech leaders advocate for slowing AI progress to mitigate risks and ensure safety.

Published

on

On Saturday, September 12, 2026, Anthropic CEO Dario Amodei published an essay titled “We Must Pace the Frontier”, calling on the AI industry to deliberately slow the development of its most advanced models. He proposed a three-part plan, starting with giving independent third-party evaluators “employee-like access” to developers’ internal work. Within hours, xAI owner Elon Musk posted “Dario is right,” and OpenAI CEO Sam Altman said he agreed the industry needed to “pace the frontier”, committing OpenAI to welcome independent evaluators. The rare alignment reflects a burgeoning movement within the technology community. The aim is to ensure that AI advancement does not outpace the necessary safety measures that must be in place to protect society. Musk, known for his outspoken concerns regarding AI, has been vocal about the potential existential threats posed by unchecked AI development. His stance is not without precedent. In past years, he has been an advocate for AI regulation, emphasizing the importance of establishing robust safety protocols. Sam Altman shares this concern. As a key figure in AI innovation, Altman’s support for decelerating AI progress highlights the industry’s internal awareness of its own vulnerabilities. Altman has been instrumental in shaping AI discussions, both as a developer and a policymaker. His involvement underscores a critical shift in perspective among those who once championed AI’s limitless potential.

Amodei’s essay warned that AI capabilities had been advancing drastically faster since the summer, and argued that buying even an extra year or two to work on alignment could greatly reduce the risk of something going seriously wrong. As CEO of Anthropic, Amodei’s insights into AI’s capabilities are profound. He has long advocated for responsible AI development, emphasizing research into AI safety and alignment. His company, Anthropic, is at the forefront of AI safety research, making his voice particularly influential. Amodei’s concerns are grounded in the belief that AI systems need to be designed with alignment and transparency as core principles. The consensus among these leaders is clear. The pace of AI development must be moderated to prevent potential societal disruptions. The public discourse around AI safety has evolved significantly over the past few years. Initially, concerns were often dismissed as speculative or alarmist. However, as AI systems become more integrated into daily life, their impact is undeniable. From autonomous vehicles to intelligent personal assistants, AI technologies influence countless aspects of modern existence. The rapid integration has outpaced regulatory frameworks, leaving gaps that could potentially be exploited.

This movement to slow AI development is gaining traction within the tech community. It reflects a deeper understanding of the potential risks and ethical considerations that come with advanced AI systems. Industry leaders are increasingly aware of their responsibility to mitigate these risks. There is a growing consensus that more comprehensive safety measures and regulatory oversight are necessary. The call for a slowdown is not a demand to halt innovation. Rather, it is a plea for a more deliberate approach to AI development. The goal is to establish a regulatory framework that prioritizes safety, ethical considerations, and long-term societal impact. This approach seeks to ensure that AI technologies are developed responsibly and with foresight. The motivation behind this push is multifaceted. At its core is the desire to prevent unintended consequences that could arise from unchecked AI advancement. These include potential job displacement, privacy concerns, and the risk of AI systems being used for malicious purposes. The tech industry is increasingly aware that the societal implications of AI are vast and complex. There is a recognition that addressing these challenges requires collaboration across sectors and disciplines.

The momentum to slow AI development also reflects a shift in how technology leaders view their role in society. There is a growing acknowledgment that technological innovation must be balanced with ethical responsibility. This recognition is driving the call for more stringent safety protocols and regulatory oversight. As the debate around AI continues, the voices advocating for caution are becoming more prominent. The movement is gaining momentum, supported by influential figures and organizations committed to ensuring that AI development proceeds safely and responsibly. The challenge now is translating this momentum into actionable policies and frameworks. Governments and regulatory bodies must work closely with industry leaders to develop comprehensive guidelines that address the unique challenges posed by AI. This collaboration is essential to fostering innovation while safeguarding societal interests. The path forward requires a collective effort to balance progress with prudence. As AI continues to evolve, the need for thoughtful and responsible development becomes increasingly critical. The calls to slow down AI development are a testament to the industry’s commitment to navigating this complex terrain with care.

The journey ahead is not without challenges. Implementing effective regulatory measures will require cooperation and consensus among diverse stakeholders. However, the growing momentum to address AI safety concerns offers hope for a future where technological advancement is aligned with societal well-being. As industry leaders and policymakers work together, there is potential to shape a future where AI technologies enhance, rather than disrupt, the fabric of society. The commitment to responsible AI development is key to ensuring that AI technologies are harnessed for the greater good. This forward-thinking approach will be crucial in defining the next chapter of AI innovation. The momentum to slow down AI development is more than a precautionary measure. It is a strategic decision to prioritize safety, ethics, and long-term impact. As the conversation around AI continues to evolve, the focus on responsible development will remain at the forefront. The future of AI depends on the choices made today. By embracing a more measured approach, the tech community can pave the way for a future where AI serves humanity’s best interests.

Continue Reading

Science & Technology

Quantum Computing Breakthroughs: Disrupting Industries with Oxford’s Innovations

A recent breakthrough in quantum computing at the University of Oxford promises to disrupt multiple industries by significantly enhancing computational capabilities. Explore the technological implications and potential disruptions poised to redefine sectors.

Published

on

In May 2026, the University of Oxford announced a significant breakthrough in the field of quantum computing, unveiling an advanced error correction algorithm that has the potential to transform computational capabilities. This development is not just a scientific triumph; it heralds a new era of technological disruption across multiple industries. Quantum computing, long anticipated as the next frontier in technology, promises to solve complex problems beyond the reach of classical computers, and Oxford’s latest advancement brings this closer to reality.

At the core of this breakthrough is the enhancement in quantum error correction, a critical component that addresses the inherent instability of qubits, which are the fundamental units of quantum information. Traditional computers use bits of 0s and 1s, but quantum computers operate on qubits, which can exist in multiple states simultaneously. This superposition allows quantum computers to process information exponentially faster than classical computers. However, qubits are notoriously prone to errors due to environmental noise and operational inaccuracies. Oxford’s new algorithm significantly improves the error correction process, maintaining qubit stability longer and allowing extended computational tasks to be performed accurately.

The implications of this are profound. Industries ranging from pharmaceuticals to finance stand on the cusp of disruption as quantum computing offers the ability to model complex molecular structures, optimize large-scale financial portfolios, and even revolutionize artificial intelligence algorithms. In pharmaceuticals, for example, quantum computing can expedite drug discovery by accurately simulating molecular interactions, potentially reducing the time and cost associated with bringing new drugs to market. Similarly, in finance, quantum algorithms can optimize trading strategies and risk management with a precision unattainable by current technologies.

Moreover, the ripple effects of such a leap in computational power extend to data encryption and cybersecurity. Quantum computers possess the potential to decrypt classical encryption methods, prompting a race for quantum-resistant cryptography. This necessitates a paradigm shift in how we secure digital information, affecting every sector that relies on data security.

Despite the tremendous promise, the transition to quantum computing is not without its challenges. The infrastructure required to support quantum technologies is expensive and complex. There is also a significant skills gap; experts in quantum computing are scarce, and training a new generation of scientists and engineers is imperative. Furthermore, ethical considerations regarding the power of quantum computing must be addressed, particularly in terms of privacy and security.

Looking forward, as quantum computing continues to evolve, industries will need to adapt swiftly to harness its capabilities. Early adopters who invest in quantum technologies and develop quantum-ready strategies will likely dominate in the coming decade. As Oxford’s breakthrough demonstrates, the race is on to fully realize the potential of quantum computing and redefine the boundaries of what is technologically possible.

Continue Reading

Science & Technology

Apple’s AI Innovations: Shaping the Competitive Landscape in 2026

Apple’s latest advancements in artificial intelligence are setting the stage for a competitive showdown with other tech giants. This article explores how Apple’s AI strategy is positioning the company in the fast-evolving tech landscape.

Published

on

In the bustling realm of technology, few companies command as much attention as Apple. In 2026, the Silicon Valley titan has once again captured the tech world’s gaze with its latest advances in artificial intelligence. As Apple unveils a suite of AI-driven innovations, the competitive landscape is poised for a seismic shift.

Apple’s strategic focus on AI is not merely about introducing new features but is a calculated move to redefine user experiences while maintaining its staunch advocacy for privacy. At the heart of Apple’s AI initiatives is the promise of personalization—an AI that learns and adapts to the user’s preferences, offering seamless interaction across its range of devices. This focus is especially pertinent in an era where user data is a hot commodity, and privacy concerns are at an all-time high.

What sets Apple apart in the AI race is its dual emphasis on innovation and privacy. While competitors like Google and Amazon have long been heralded for their AI prowess, often prioritizing expansive data collection to fuel their AI engines, Apple has carved out a niche by leveraging on-device processing. This approach not only mitigates privacy risks but also enhances real-time responsiveness, a crucial factor in user satisfaction.

The competitive implications of Apple’s AI advancements are profound. Google’s AI, renowned for its search and recommendation algorithms, faces a formidable challenger in Apple’s ecosystem-centric approach. Meanwhile, Amazon’s Alexa, which dominates the smart assistant market, must contend with Apple’s Siri, now equipped with enhanced contextual understanding and predictive capabilities.

Microsoft, another major player, has been making strides with its integration of AI in cloud services and productivity tools. However, Apple’s holistic approach—integrating AI across hardware, software, and services—presents a cohesive strategy that is difficult to replicate. This integration not only ensures a seamless user experience but also reinforces brand loyalty, a cornerstone of Apple’s business model.

As AI continues to evolve, the stakes in the tech industry are higher than ever. Apple’s innovations are not just about keeping pace but are strategically designed to place the company at the forefront of the AI revolution. In doing so, Apple is not only safeguarding its market position but is also setting new benchmarks in how technology can enhance and secure our digital lives.

The road ahead will undoubtedly see further advancements and competition, but Apple’s current trajectory suggests it is well-positioned to lead in the AI domain. By prioritizing user-centric design and privacy, Apple is not just participating in the AI race; it is setting the pace.

Continue Reading

Trending