Tech News
← Home  ·  All topics

Picus Security

2 GoKawiil briefs on this topic

Picus Security details gaps in AI-driven penetration testing tools

A Picus Security engineer outlines how agentic pentesting—where AI agents autonomously run reconnaissance, exploitation and reporting steps—has emerged as a faster alternative to scheduled automated pentests, citing Picus's own Swarm product as an example. The piece argues this approach can uncover exploit chains humans might miss, but notes it carries tradeoffs, including heavy token/compute usage, and identifies blind spots that need to be addressed.

PaperCut's August patch failures show zero-day response now measured in hours

PaperCut disclosed active exploitation of PaperCut NG/MF servers on August 27 with no CVE, no available exploit sample, and no patch. An emergency fix issued the next day was bypassed within hours, and a third patch only arrived on September 1, leaving customers exposed for roughly six days while attackers were already using the flaw in live attacks. A security researcher uses the episode to argue that the industry's old assumptions about response timelines no longer hold.