Business & Finance
Horizon3.ai Releases 2025 Cybersecurity Insights Report: Key Findings from Over 50,000 NodeZero® Pentests
[ad_1]
London – Keith Poyser, Vice President for EMEA: “This report offers a
groundbreaking analysis based on real-world cyberattack techniques
conducted at organisations across the globe, delivering invaluable
insights.”
Horizon3.ai, a global leader in
offensive security, today released its 2025 Cybersecurity Insights
Report, revealing the common security gaps organisations struggle to
close. By analysing exploit trends from 50,000 NodeZero® autonomous
security tests run in 2024, along with insights from a survey sample of
nearly 800 security leaders and practitioners, the report presents clear
evidence of how current security strategies are failing, and what
organisations must change to stay ahead of evolving threats.
Horizon3.ai defines offensive security as using real-world attacker
techniques to identify and exploit weaknesses across IT
environments—proving what’s truly at risk. Unlike passive security,
which relies on layered defences with unverified effectiveness, NodeZero
autonomously conducts safe, full-scale tests that demonstrate exactly
how attackers could compromise critical systems. The result: clear,
actionable proof that enables teams to find, fix, and verify
vulnerabilities—before adversaries strike.
Horizon3.ai highlights key findings from the report:
-
Vulnerability Scanning Falls Short – Despite 98% of
organisations using vulnerability scanning, only 34% find it highly
effective due to false positives that hinder teams from focusing on
real risks. -
Credential-Based Attacks Remain a Major Risk – NodeZero
successfully performed credential dumping in over 28,000 cases,
demonstrating the widespread risk of weak credential practices and
policies. -
Patch Management Delays Leave Systems Exposed – Over half of
practitioners (53%) and more than a third of security leaders (36%)
admit to delaying patches due to operational constraints, leaving
critical vulnerabilities open. -
Known Vulnerabilities Remain Unpatched – NodeZero exploited 229
known vulnerabilities nearly 100,000 times in customer environments,
demonstrating that many organisations struggle to remediate even
widely recognized threats.
“Security isn’t about reacting—it’s about outpacing your adversary,”
said Snehal Antani, CEO & Co-Founder of Horizon3.ai. “Too many
organisations still confuse compliance for security, falling back on
outdated assumptions and annual testing cycles. This report shows what
modern defenders already know: you have to think like an attacker,
validate like an operator, and build a security program that stands up
to real-world pressure.”
Why Offense-Driven Security Is the Only Way Forward
These aren’t isolated problems—they reflect a broader pattern the report
lays bare. Across nine key themes, it shows that organisations continue
to rely on point-in-time testing, noisy tools, and risk models built on
assumptions rather than proof.
Each section exposes a recurring failure, from vulnerability overload
and delayed patching to ineffective pentests, cloud misconfigurations,
and especially credential weaknesses. Fixing these issues requires more
than remediation; it demands continuous visibility into identity,
access, and privilege exposure.
The takeaway: only an offense-driven approach that continuously tracks
readiness and validates defences while leveraging deception, detection,
and real-world attacker perspectives can expose and eliminate the gaps
attackers rely on.
“This report is a reality check for security teams,” said Stephen Gates,
Principal Security SME at Horizon3.ai. “It doesn’t just highlight where
defences are failing, it points to a better path forward. If you’re
still relying on assumptions, static tools, or annual tests, this data
makes it clear: it’s time to evolve. Offensive security isn’t a
nice-to-have—it’s the strategy that separates the resilient from the
exposed.”
The State of Cybersecurity in 2025: Data-Driven Insights from Over
50,000 NodeZero® Pentests is available now. Explore the root
causes behind today’s most persistent security failures—and learn how an
offense-driven approach is helping organisations finally close the gaps
attackers rely on.
Download
the full report today.
About Horizon3.ai and NodeZero: Horizon3.ai provides a
cloud-based platform, NodeZero, enabling organisations and public
authorities to run production safe self-attacks on their IT
infrastructure to assess their cyber resilience through penetration
testing (pentesting). Thanks to its cloud model, the platform offers
affordable, regular autonomous pentesting, making it accessible from
small to mid-sized, to large enterprises. Horizon3.ai continuously
monitors the cybercrime landscape to ensure that newly discovered
vulnerabilities are swiftly integrated into the cloud system. NodeZero
not only identifies security flaws but also offers tailored
recommendations for remediation. Through this platform, Horizon3.ai
helps organisations meet rising regulatory demands for cyber resilience
in Governance, Risk & Compliance (GRC), with guidelines recommending an
internal self-attack at least once a week.
Trademark notice: NodeZero is a registered trademark of
Horizon3.ai
Further information: Horizon3.AI Europe GmbH, Prielmayerstrasse 3, 80335 Munich, Web: www.horizon3.ai
PR Agency: euromarcom public relations GmbH, www.euromarcom.de, [email protected]
[ad_2]
Source link
Business & Finance
FBI Identifies North Korea as Culprit in $6.3 Billion Binance Crypto Hack
FBI attributes $6.3B Binance crypto hack to North Korea, raising security concerns. Binance covers 90% of losses.
In a striking attribution of cyber malfeasance, the Federal Bureau of Investigation has named North Korea as the perpetrator behind a colossal $6.3 billion hack on Binance, one of the world’s largest cryptocurrency exchanges. This revelation underscores persistent cybersecurity vulnerabilities and intensifies geopolitical tensions already fraught with complexity [The Guardian, November 2026].
The breach, now recognized as the largest of its kind, has sent shockwaves through the digital asset community, raising urgent questions about the robustness of current security protocols within the crypto industry [Al Jazeera, November 2026]. Despite the significant financial blow, Binance has demonstrated resilience by covering a substantial 90% of the losses, reflecting its commitment to maintaining user trust and stability [The Guardian, November 2026].
Binance’s response to the hack has been proactive, involving collaboration with international law enforcement agencies to pursue recovery of the stolen assets. A spokesperson from the exchange affirmed, “We are working closely with law enforcement to recover the funds,” indicating a strategic approach to mitigate the consequences of this unprecedented breach [The Guardian, November 2026].
The scale of the hack, valued at $6.3 billion, places it squarely in the spotlight of global financial and security discussions. It serves as a stark reminder of the vulnerabilities inherent in digital finance systems, particularly as they become more entwined with global economic infrastructures [Al Jazeera, November 2026].
North Korea’s involvement in such a high-profile cybercrime reflects broader geopolitical dynamics, where state-sponsored hacking has become a tool for economic gain and political leverage. This attribution by the FBI further complicates diplomatic relations and underscores the need for coordinated international responses to cyber threats [The Guardian, November 2026].
The incident has not only affected Binance but has also sent ripples across the broader cryptocurrency market, prompting investors and exchanges to reassess their security measures. The hack’s magnitude highlights the urgent need for enhanced protective measures and industry-wide collaboration to fortify digital asset exchanges against future threats [Al Jazeera, November 2026].
In the wake of this cyber assault, Binance’s robust response and coverage of losses may set a precedent for how exchanges handle such adversities in the future. It also emphasizes the critical role of transparency and accountability in maintaining user confidence and market integrity [The Guardian, November 2026].
As the situation unfolds, the interplay between cybersecurity and international politics will likely intensify, with potential repercussions for regulatory frameworks governing digital assets. The hacking incident serves as a catalyst for ongoing debates about the balance between innovation and security in the realm of cryptocurrency [Al Jazeera, November 2026].
Looking forward, the focus will remain on how Binance and other cryptocurrency platforms adapt to these evolving threats. Their ability to enhance security protocols and foster international cooperation will be crucial in defining the future landscape of digital finance. The world will closely monitor these developments, particularly as they relate to North Korea’s cyber capabilities and intentions [The Guardian, November 2026].
Business & Finance
Naboo Expands with Acquisition of UK Events Platform Pro-ven
Naboo has acquired UK M&E spend specialist pro-ven, which becomes Naboo UK, keeping all 20 staff and its founder.
Naboo, the Paris-based meetings and events (M&E) spend management platform, announced on 27 October 2026 that it has acquired pro-ven, a UK specialist in venue sourcing and event procurement, for an undisclosed sum. The companies say the combination creates the world’s largest pure-play provider of M&E spend management and venue sourcing.
Founded in 2005, pro-ven helps corporate and association clients manage meetings and events spending through venue and supplier sourcing, contract negotiation, approval workflows, invoicing and payment management. It generates around €30 million in annual transaction value and brings enterprise clients including Unilever, Virgin Media and Sony. Following the deal, Naboo says the combined business will manage around $300 million (€268 million) of meetings and events spend.
Under the terms of the deal, pro-ven’s Hertfordshire office becomes Naboo’s UK headquarters and the business will operate as Naboo UK. All 20 pro-ven employees are being retained, and founder and managing director Julian Laxon will stay on to help grow Naboo’s UK presence. Existing pro-ven clients keep the same account teams and commercial arrangements, while gaining access to Naboo’s AI-driven technology platform and international network.
Naboo says the acquisition was financed equally through equity and borrowing. It follows the company’s $70 million (€58.7 million) Series B round in February 2026, led by Lightspeed Venture Partners with participation from existing investors Notion Capital, ISAI and Ternel.
The UK is not a new market for Naboo, which has operated there since 2024. CEO and co-founder Maxime Eduardo said the deal is primarily about accelerating growth in what he called a huge market for the company and adding enterprise customers. “Together with pro-ven, that is the leader we are building,” he said.
The acquisition caps a busy period for Naboo, which recently unveiled a new brand identity and opened its first Asia-Pacific office in Singapore, following its expansion into North America with offices in Montreal and New York.
Sources: Business Travel News; EU-Startups; CIT World; The Business Travel Magazine.
Business & Finance
How AI is Transforming Small Businesses: Success Stories
This article explores the transformative impact of AI on small enterprises, highlighting specific case studies of businesses that have successfully integrated AI technologies to enhance efficiency and competitiveness.
In September 2026, the Financial Times reported a significant surge in the adoption of AI technologies by small enterprises, driven by the promise of enhanced efficiency and reduced operational costs. Among the many businesses venturing into this digital frontier, a few stand out as exemplary cases, demonstrating the transformative power of AI when strategically implemented.
Take, for instance, GreenLeaf Grocers, a small organic food retailer based in Brighton. Faced with the challenges of scaling operations and managing inventory efficiently, GreenLeaf turned to AI-driven inventory management systems. By analyzing customer purchasing patterns and forecasting demand, the system enabled the grocer to optimize stock levels, reducing waste by 30% within the first year. The owner, Sarah Jenkins, noted, “AI has not only streamlined our operations but has also allowed us to focus more on customer service and community engagement.” This case underscores the potential of AI to reshape retail operations, offering insights into customer behavior that were previously inaccessible.
Another compelling story is that of TechFixers, a family-run electronics repair shop in Manchester. Confronted with increasing competition and the need to differentiate their services, the owners implemented an AI-powered diagnostic tool. This technology rapidly identifies device issues, providing technicians with precise solutions. As a result, TechFixers reduced average repair times by 40%, significantly boosting customer satisfaction and expanding their clientele. The owner, Mark Thompson, attributes their competitive edge to AI, stating, “Integrating AI into our diagnostic process has been a game-changer, allowing us to offer quicker, more reliable repairs.”
In the realm of financial services, FinServe, a small accounting firm in London, illustrates the impact of AI on service delivery. By employing AI-based analytics tools, FinServe offers clients real-time financial insights and predictive forecasting. This capability has attracted a new segment of tech-savvy clients seeking proactive financial management. The firm’s director, Lucy Patel, emphasized the strategic advantage gained, “AI has empowered us to provide a level of service that was previously the domain of larger firms. We’re now able to deliver insights and strategic advice that truly add value for our clients.”
These cases highlight not only the successful application of AI in various industries but also the diverse ways in which small enterprises can leverage technology to overcome specific challenges. While the potential benefits of AI are substantial, the journey is not without its hurdles. Businesses must navigate the complexities of data integration, system compatibility, and the initial investment costs. However, for those willing to embrace the change, the rewards can be substantial.
As AI technology continues to evolve, its role in small business operations is likely to expand, offering new opportunities for innovation and growth. The experiences of GreenLeaf Grocers, TechFixers, and FinServe serve as a testament to the transformative power of AI, providing a roadmap for other small enterprises eager to harness this technology.
Looking ahead, the integration of AI into small business operations is set to become even more pervasive. As technology advances and becomes more accessible, businesses of all sizes will find new ways to leverage AI for competitive advantage, creating a dynamic and constantly evolving landscape.
-
Business & Finance2 years agoXella achieves significant progress in CO₂ emissions reduction, circular economy, and occupational safety
-
Environment & Nature2 years agoSK tes Launches New Circular IT Facility in Shannon, Expanding Ireland’s Role in Global Sustainable Tech Services
-
Entertainment & Arts6 months agoDrake’s ‘Iceman’: A Streaming Chart-Busting Success Story
-
Science & Technology6 months agoApple’s AI Innovations: Shaping the Competitive Landscape in 2026
-
Business & Finance6 months agoAI Revolutionizes Cryptocurrency Trading with Real-Time Analysis
-
Business & Finance6 months agoEU’s Regulatory Shift: A Boon for Small Tech Firms
-
Environment & Nature6 months agoScotland’s Rewilding Revolution: Ecological Benefits and Global Influence
-
Entertainment & Arts6 months agoThe Cinematic Legacy of Michael Jackson: A Biopic Unveiled
