Tag

Vulnerability Management

Articles about "Vulnerability Management"

2 articles

AI Pentest Tools and Open-Weight Models Used in Attacks: The Disclosed Facts and How to Prepare

In October 2026, CrowdStrike reported attacks that combined ARTEX, an open-source AI penetration-testing tool developed in China, with models such as DeepSeek v4.1-flash. Together with NIST's and Anthropic's assessments of GLM-5.3, this article separates the disclosed facts from what is still unknown, and sets out six things companies should prepare.

2026-10-20Ryuta Hamamoto

AI Security

What the Digital Agency's GSS Breach Teaches Companies About VPN Patching

On 11 September 2026, Japan's Digital Agency disclosed unauthorized access to GSS, the shared work environment for government staff. The entry point was a publicly known VPN vulnerability rated "Medium". This piece walks through the official disclosure, why severity-ordered patching did not arrive in time, why VPN appliances have become the most common way in, why zero trust did not prevent it, and what any organisation can change this week.

2026-09-11Ryuta Hamamoto

2 articles

AI Security

AI Pentest Tools and Open-Weight Models Used in Attacks: The Disclosed Facts and How to Prepare

In October 2026, CrowdStrike reported attacks that combined ARTEX, an open-source AI penetration-testing tool developed in China, with models such as DeepSeek v4.1-flash. Together with NIST's and Anthropic's assessments of GLM-5.3, this article separates the disclosed facts from what is still unknown, and sets out six things companies should prepare.

2026-10-20Ryuta Hamamoto

AI Security

What the Digital Agency's GSS Breach Teaches Companies About VPN Patching

On 11 September 2026, Japan's Digital Agency disclosed unauthorized access to GSS, the shared work environment for government staff. The entry point was a publicly known VPN vulnerability rated "Medium". This piece walks through the official disclosure, why severity-ordered patching did not arrive in time, why VPN appliances have become the most common way in, why zero trust did not prevent it, and what any organisation can change this week.

2026-09-11Ryuta Hamamoto