Ethics

Where and how to practise penetration testing without breaking the law: hosted labs, home labs (GOAD, Juice Shop, DVWA), cloud provider testing rules for AWS, Azure and Google Cloud as of October 2026, rules of engagement, safe phishing and lateral-movement simulation, and what the law says.

The real risks of AI-powered surveillance — facial recognition, large-scale tracking, chilling effects and bias — and the governance safeguards that keep legitimate uses accountable: purpose limitation, proportionality, oversight and transparency.