PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Technology and Software: 2023 Insights From the Ponemon Institute

bishopfox.com | blog | #offensive-security | #dast | #industry-report | #breach-and-attack-simulation | #ponemon-institute | #technology-sector
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Ponemon Institute data shows technology and software firms favor breach and attack simulation (43% vs 37%) and dynamic application security testing, prioritizing vulnerability triage more than peers.
Published
Collected

Related coverage

blog · bishopfox.com
Healthcare: 2023 Insights from the Ponemon Institute
Ponemon Institute data on healthcare: 63% say practices like red teaming and IoT testing strengthened defenses, with the sector leading in medical device IoT/product security testing (51%).
blog · bishopfox.com
Red Teaming: 2023 Insights from the Ponemon Institute
Ponemon Institute findings from 664 practitioners: 47% rank Red Teaming among the most effective offensive strategies, valued for testing worst-case scenarios against real-world TTPs.
blog · bishopfox.com
Financial Services: 2023 Insights From the Ponemon Institute
Ponemon data on financial services: FinServ leads in application security, ASM and threat intel sharing via FS-ISAC; 45% call their strategy fully mature and 73% rely on third-party providers.
blog · bishopfox.com
Cloud Offensive Security: 2023 Insights From the Ponemon Institute
Ponemon Institute polled 664 IT and security practitioners: cloud migration drives offensive security spending, 43% test cloud environments, and cloud vulnerabilities rank among top threats.
blog · bishopfox.com
Architecting An Offensive Security Blueprint: 2023 Insights From the Ponemon Institute
A Ponemon Institute survey of nearly 700 practitioners finds 64% met security and governance goals through offensive testing, with Red Teaming rated highly effective at improving preparedness.
blog · portswigger.net
The future of pentesting is Human x AI, and it's already in Burp Suite Professional
HackerOne's 2025 report shows 70% of researchers now use AI tools, yet only 12% believe AI could replace humans, and PortSwigger positions Burp AI as the leading human-in-the-loop option.
Back