News, Article, and Solution in Cybersecurity Realms.

INTRODUCTION What percentage of your last penetration test report was actually proven exploitable, and what percentage was a list of things a scanner flagged and nobody validated? Most CISOs cannot answer that question with confidence, and that is exactly the problem. Buyers guides published this year point to a pattern worth sitting with. If a quoted penetration test comes in at four to five thousand dollars or less, it is very likely an automated vulnerability scan wearing a pen test label, not manual work performed by a skilled tester. That gap between what is sold as a penetration test and what is actually delivered is why the selection conversation matters so much more than most procurement teams treat it. ITSEC Asia, Indonesia's leading cybersecurity company, works with organizations across Indonesia, Singapore, Australia, and the UAE that have gone through this exact evaluation, and the questions that separate a genuinely useful engagement from an expensive checkbox exercise are more specific than most RFPs ever ask. Source: Six Questions to Ask a

Artificial Intelligence (AI) is accelerating the pace of technology development, but the same capabilities are also enabling cyberattacks to become faster and more automated. As digital systems evolve at unprecedented speed, organizations face increasing pressure to ensure their security testing can keep up with rapidly changing technologies and threats. Addressing this challenge, PT ITSEC Asia Tbk (ITSEC Asia) (IDX: CYBR), one of Indonesia's leading cybersecurity and AI companies, today officially launched Bronyx AI, an AI-assisted automated penetration testing platform developed in Indonesia to help organizations complete security testing in hours while retaining the expertise and oversight of cybersecurity professionals. The launch event, held in Jakarta on Wednesday (15 July), was attended by Edwin Hidayat Abdullah, Director General of Digital Ecosystem at the Ministry of Communication and Digital Affairs of the Republic of Indonesia; Sonny Hendra Sudaryana, Director of Digital Ecosystem Development at the Ministry of Communication and Digital Affairs; and Yudho Giri Sucahyo, Member of the Ethics Council of the Indonesian Fintech Association (AFTECH). During the event, speakers discussed the rapid

INTRODUCTION How much of what a vulnerability scanner flags every week actually turns out to be real? Research from OWASP puts the false positive rate for common vulnerability types somewhere between 15% and 30%, and separate research from Snyk found that security teams now spend roughly 70% of their time chasing alerts that end up being nothing at all. That gap between what a tool reports and what is actually exploitable is not a minor inconvenience. It is the reason a third of companies surveyed admitted they responded late to a genuine attack because their team was buried in phantom threats instead. ITSEC Asia, Indonesia's leading cybersecurity company, works with organizations across the region that have learned this the hard way, and the question that keeps coming up is simple. If a scanner already checks the boxes, why does AI-powered penetration testing exist at all, and what does it actually do differently? Source: OWASP false positive research via DEV Community [https://dev.to/kuboidsecurelayer/why-automated-vulnerability-scanners-miss-most-real-security-vulnerabilities-2p96] · Snyk: Minimizing False Positives [https://snyk.io/blog/minimizing-false-positives-enhancing-security-efficiency/] THE FUNDAMENTAL DIFFERENCE: FOLLOWING RULES