Ethiack said the number of cyber vulnerabilities it identified across client IT environments rose 106% over the past year, increasing from 17,500 to more than 36,000.

The Portugal-based cybersecurity group said the rise came despite only a modest increase in the number of digital assets under monitoring. Vulnerabilities per monitored asset climbed from 0.9 to 1.7 over the same period, indicating a sharper rate of exposure across the systems it tested.

The figures add to broader evidence of a shift in how attackers gain entry to organisations. Verizon’s 2026 Data Breach Investigations Report found that exploited software vulnerabilities accounted for 31% of cyber breaches, up from 20% a year earlier, overtaking stolen passwords as the most common initial access route.

Ethiack said its platform tracked more than 190,000 digital assets during the year and now monitors more than 21,000 in-scope assets each month. Its client base grew 30% as the company expanded into the UK and Switzerland.

Threat speed

Ethiack linked the increase in discovered weaknesses to both improved detection and a faster-moving threat environment. Industry research it cited said the median time between a vulnerability being disclosed and being actively exploited has fallen from 771 days in 2018 to a matter of hours.

That shift has narrowed the time available for security teams to respond once flaws are discovered. In some cases, vulnerabilities are identified and attacked before public disclosure, leaving little room for patching or other defensive action.

Jorge Monteiro, Chief Executive Officer of Ethiack, described the pace of change as the main concern for defenders.

“The most important change we’ve seen over the past year isn’t the type of vulnerabilities attackers are exploiting. It’s the speed at which they’re finding and weaponising them.

For years, organisations could assume they had days, weeks or even months to identify and remediate vulnerabilities. That assumption no longer holds. Today, attackers can use AI to identify weaknesses, generate exploits and launch attacks in a matter of hours.

Perhaps most concerning is that AI can now help attackers reverse-engineer security patches themselves. Organisations may spend weeks developing and testing a fix, only for cybercriminals to analyse the patch and use it to identify the underlying vulnerability and attack it within minutes.

The mismatch between attacker speed and defender speed is growing. Periodic security assessments and annual penetration tests were designed for a different era. Organisations now need continuous monitoring of their attack surface and validation of any vulnerabilities to keep pace with the machine speed and scale of threats,” Monteiro said.

Company growth

The business added 13 employees and six ethical hackers over the year. Founded in Portugal in 2022 by André Baptista and Monteiro, it works with organisations across Europe, including ANA, Portugal’s national airport operator.

The increase in vulnerabilities identified does not necessarily mean every client environment became less secure in absolute terms, but it does point to a larger pool of weaknesses being uncovered as attack surfaces expand and tools improve. Modern corporate systems often span cloud services, third-party software, employee devices and internet-facing applications, increasing the number of possible entry points.

For security teams, the data adds to pressure to move faster on validation and remediation. If attackers can use AI to analyse newly issued patches and infer the flaws they address, the traditional gap between patch release and practical exploitation may continue to shrink.

That trend is becoming more significant as the volume of known software flaws rises each year. The challenge for organisations is not only discovering weaknesses, but also determining which are exploitable and urgent enough to prioritise before attackers act first.

SOFIAH NICHOLE SALIVIO

News Editor

Venture Forge has appointed Stephen Kenwright as Fractional Chief Commercial Officer, adding the former Rise at Seven executive to the Yorkshire Amazon agency’s leadership team.

At the 21-person company, Kenwright will lead new business and marketing as Venture Forge develops its commercial strategy and expands its market presence. The appointment comes as the agency prepares to support client brands through Amazon Prime Day, a key trading period for sellers on the platform.

Founded in 2018 by former Heads of E-Commerce Andrew Banks and Jonathan Newton, Venture Forge helps consumer brands sell through Amazon. Its clients include Thermos, VAX, John Cotton and Glen Dimplex.

Kenwright brings nearly two decades of experience in commercial, digital and agency leadership. He founded Rise at Seven in 2019 and helped grow the business to annual revenues of more than £7 million, with 110 employees across Sheffield, Manchester, London and New York, before leaving after three years.

He also founded SearchLeeds and now works as a non-executive director and business development consultant for several agencies. His work has been recognised by Business Insider’s 42 Under 42 and The Drum.

Growth plans

The hire reflects Venture Forge’s efforts to strengthen its leadership team as the business grows. The agency has built its position by advising consumer brands on Amazon sales, operations and profitability.

The role adds dedicated senior oversight of commercial development beyond the two founders, marking a shift from a founder-led growth model to a broader management structure as the business expands.

Kenwright said he had not expected to take on another CCO role.

“I had no plans to return to the fray in a CCO role, but the opportunity with Venture Forge was too good to pass up.

“I was excited to get deep into Amazon, since I feel like I’ve only scratched the surface in my previous companies. Working with Andy and Jonathan, who’ve been friends of friends for a long time and experienced retailers in their own right, has been a great experience over the last few weeks.”

“Most of all, it feels like an agency in its ascendency, and one where I can make a significant difference.”

Founders’ view

Andrew Banks, Founder and Managing Director of Venture Forge, said the appointment reflects both Kenwright’s background and the stage the company has reached.

“Stephen isn’t a stranger. He’s someone Jonathan and I have known of and rated for years.

“So this was never just about hiring a CCO. It’s about the right person arriving at exactly the right moment: the point where our commercial ambition has outgrown what two founders can carry alone.

“Having an operator of his pedigree choose us tells us everything about where Venture Forge is heading.”

The recruitment also reflects continued demand for specialists in marketplace commerce, particularly among consumer brands seeking stronger sales on Amazon. Agencies in this segment have benefited as manufacturers and retailers devote more attention to direct marketplace performance, advertising and fulfilment economics.

Prime Day remains one of the most important points in the Amazon trading calendar, often driving a surge in promotional activity, stock planning and advertising spend among brands. For agencies serving that market, the period can act as both a test of operational readiness and a source of new client demand.

Both founders previously held Head of E-Commerce roles before setting up the business. As Banks put it, the company has reached “the point where our commercial ambition has outgrown what two founders can carry alone.”

In an open letter, sent to Oxfordshire County Council, a group led by estate agent Savills and including developers and university colleges, has predicted a hit to new home delivery and business funding if new parking standards are not dropped soon.

They also said the new rules may lead to existing communities being charged to park on the street, outside their own homes.

READ MORE: Probe launched into quality of Oxford Brookes University’s banking course

Delivered on Wednesday, June 17, the letter was signed by David Jackson, director at estate agents Savills, on behalf of Oxford University Development, as well as Brasenose, Christ Church, Exeter, Magdalen, New, Nuffield and St John’s colleges.

The university and colleges are involved in a number of building projects around the city including Begbroke and Oxford North innovation districts, and 1,450-home Bayswater Brook.

An aerial view of the innovation area at Begbroke Science Park Photo: Cavendish

In addition, developers Bellway Homes, Catesby Estates, Dorchester Residential Management and Greencore Homes were also signatories.

The group stressed that they support the council’s overall transport objectives including reducing car usage and increasing active travel but are “deeply concerned” about the 2026 standards.

These were adopted at a council meeting on April 21, and it was proposed they should apply to the entire county.

David Jackson, director at estate agents Savills (Image: Savills)

In his letter, Mr Jackson highlighted the introduction of a new category for residential development ‘Car Light’ and changes to the previously existing ‘Car Free’ communities.

‘Car Light’ is a new distinction for which a reduced level of parking provision is mandated, with 50 per cent of parking required to be on the street.

The tweaks to the ‘Car Free’ communities, which will see acceptable walking distances increased, would significantly extend the area in which new homes will have to be built with no parking provision.

The Red Hall under construction at Oxford North development (Image: Ed Nix)

The leader of Oxfordshire County Council denied the new parking standards were about being “anti-car”.

Tim Bearder said: “Oxfordshire is being asked to accommodate very significant housing and employment growth over the coming decades, but we cannot endlessly widen roads or build ever more parking spaces.”

The Liberal Democrat explained that if car use grows unchecked, congestion will worsen, creating difficulties for those who have no alternative to driving.

Councillor Tim Bearder (Image: Tim Bearder)

In addition, parking spaces take up land and reduce the number of homes that can be delivered.

Mr Bearder, who was named leader only last month, said transport had to be balanced, with developments prioritised for areas where public transport is an option.

“If we fail to plan for that now,” he said, “the scale of growth being imposed on Oxfordshire will overwhelm a transport network that is already under considerable pressure”.

A proposed bridge at the Bayswater Brook development (Image: Christ Church/Dorchester Residential Management)

However, Mr Jackson and those behind him have made dire warnings following the introduction of the 2026 standards and have called on the local authority to withdraw them and undertake a full and open consultation on how the previous rules might be adapted.

If left, the group warned the measures would “undermine, or at the least significantly delay, the delivery of much-needed homes” including affordable properties.

READ MORE: Party atmosphere in Oxford as England win FIFA World Cup opener

They added: “They are likely to give rise to a withdrawal of investment from new business and commercial spaces consequent on the drop in the attractiveness of Oxfordshire as a location for businesses to move to.”

In addition, existing communities may well be impacted, said Mr Jackson, as a requirement for ‘Car Free’ projects will be that Controlled Parking Zones will be introduced into communities near developments to manage the risk of overspill parking in roads next to developments.

He said: “This will have the effect of requiring residents in those neighbouring communities to pay an annual fee to park on street.”