Best Practices

Blindfolded woman holding up scales of justice

US court ruling on Uber breach slammed, red teamers cautious on AI, OffSec offers ‘strategic edge’ – OffSec roundup for CISOs

Meet YesWeHack’s head of CSM: interview with Selim Jaafar

Putting the ‘success’ into Bug Bounty customer success management: Meet our head of CSM

Continuous threat exposure management (CTEM) series #3: mobilisation and remediation

Continuous threat exposure management (CTEM) series #3: mobilisation and remediation

Robot gazes satisfyingly at the ladybird he has found – signifying discovery of security bugs by AI models

OpenAI VDP for bugs found by AI, CVE funding fears persist, ‘shift left’ towards vulnerability overload – OffSec roundup for CISOs

Vulnerability prioritisation

Vulnerability prioritisation and validation: continuous threat exposure management (CTEM) series #2

Cutting the rising cost of DevSecOps

Tackling vulnerabilities at source: How to cut the rising cost of DevSecOps

How the Software as a Service (SaaS) model creates single points of failure

UK retail cyber-attacks a ‘wake-up call’, SaaS overreliance ‘creating single points of failure’, calls for global regulatory alignment – OffSec roundup for CISOs

EUCC CERT SCHEME, implications for vuln management

EUCC cyber certification scheme enters early adopter phase after vulnerability disclosure rules issued

Bug Bounty in the age of AI: a deep dive for CISOs

Mitigating AI cybersecurity risks with Bug Bounty Programs: A deep dive

AI software developer, depicted as humanoid robot, does some coding

Junior devs ‘can’t actually code’, AI coding risks, security researchers decry inscrutable AI – OffSec roundup for CISOs

Vulnerability or bug management cycle

Vulnerability management reboot sought, CISOs more influential in boardroom, Trump’s cyber overhaul – OffSec roundup for CISOs

DORA enters into force: 5 ways YesWeHack’s offensive security platform can bolster your Digital Operational Resilience Act compliance

DORA now in force: 5 ways YesWeHack’s offensive security platform can bolster your Digital Operational Resilience Act compliance