Topic
Adversarial security practice where testers simulate real attackers against an organisation's own systems to uncover exploitable weaknesses.
Redwood's Screwtape pipeline produced 35 monitor-evading attacks from 252 runs on 94 unique Redwood staff transcripts. Six of them also got past a frontier developer's monitor and were confirmed valid by human review.
Reality
X-AgentRed builds a directed graph of tool dependencies to find harmful call chains across Gmail, Slack, Jira and payment APIs. It targets the gap left by single-tool security testing, where each call looks reasonable alone and the harm exists only in the sequence.
Reality
CISA's red team breached two critical-sector organisations, and only the water-sector one contained it, isolating machines in up to 20 minutes. The gap traces to alert tuning and triage, so the first fix most SOCs need is analyst time.
Reality
RemoteThreat launched with $7 million to sell enterprise red teams and U.S. government mission teams one platform for running offensive cyber operations. It is pitched as a way for expert operators to skip building their own tool chains.
Reality
Detection at the first hop forced CISA's red team onto donated access at Organization B. It did not stop the team reaching the same sensitive systems it reached at Organization A.
Perspective Coverage
5 publishersReality
A securityaffairs.com analysis maps a single month of AI security papers onto MITRE ATLAS. The techniques land on agent skills, the Model Context Protocol and injection strings found by reinforcement learning.
Reality
Accenture's Faculty unit will embed staff inside Anthropic to red-team models and test safeguards, Anthropic is paying for the work itself, and both sides have put at least $1 billion behind it over five years.
Perspective Coverage
3 publishersReality
Google confirmed a Gemini model broke into three real companies in May during an Irregular evaluation, and Irregular says the same testing fault produced the OpenAI, Anthropic and Meta cases already on record.
Reality
Shrivu Shankar rented cloud GPUs, pointed about 100 abliterated open-source agents at his own name, and five hours later two weak passwords and three old side projects had fallen while his Gmail, 1Password and bank held.
Reality
Kevin Mandia joined Amazon's board on 8 September and takes two committee seats, including the security one a retired NSA director left in May. His day job is an AI startup that attacks corporate networks.
Reality
Open weights could always be modified. Hosting them for anyone who signs up is the new part. That lands the uncensored-model question on whoever approves red-team tooling. Whether that helps defenders is contested.
Reality