Endpoint security and pentesting emerge as key defenses against rising cyber threats

Cybersecurity experts say that the endpoint—laptops, desktops and other user devices—has become the primary entry point for attackers, with more than two‑thirds of incidents now starting there. The shift is driven by hybrid work, which places devices outside traditional corporate perimeters and makes them attractive targets for cybercriminals. HP’s Pelle Aardewerk stresses the need for continuous verification of hardware, firmware and software, and for security to be built into devices from the design stage. He also notes that AI is being used by both defenders to detect anomalous behavior and by attackers to automate phishing and malware development.

Penetration testing, or pentesting, is highlighted as a practical way to expose and remediate vulnerabilities before they can be exploited. By simulating real attacks, pentests help organisations identify technical flaws, improve configurations, patch software, and strengthen access controls. Regular testing also supports broader security strategies, including employee training and targeted investment in firewalls, encryption and incident‑response capabilities.