Welcome to this edition of The AMTSO Briefing, your roundup of what’s happening in and around AMTSO.
In this issue: the first recording from Brussels, working groups back in motion, new Q3 test reports, and a new member.
Meetings and Events
Now streaming: “MCP Hijacking in the Wild”
The first recording from our 2026 Cyber Research Conference is live. Watch Justin Szczepaniak’s presentation on how MCP hijacking is already happening in real environments.
Most slide decks from Brussels are now on the member website, with a few still to come. More recordings will follow over the next few weeks on our news pages and YouTube channel.
Coming up: Testing Town Hall, early December. We’re finalizing the next call now. Look out for dial-in details, speakers and topics next week.
Working Groups
After last month’s discussions in Brussels, our working groups are back in rhythm.
AI Security. The group met last week to set next steps and debate how to measure and rate the security posture of AI models.
RTTL. After this week’s check-in, the team will host an open call in two weeks for all participants and AMTSO members to review plans for v3.0. Details will follow shortly.
Standards. We’ve re-formed this group to explore expanding and adjusting the AMTSO Standard. The goal: keep pace with new approaches to test case design and tester communications, and cover the growing range of testing types and targets our members work on. Several members have already signed up, more are expected, and a scoping call is set for next week.
AMTSO Standard and Test Calendar
New on the Test Calendar:
- SE Labs’ long-awaited Q3 reports for consumer, small business and enterprise solutions
- MRG Effitas’ main Windows and Android testing, with Phase 2 commentary under way for both
- Venak Security’s novel zero-day test, built on artificially created test cases
- A new batch of reports from AV-Comparatives
- Calendar entries for Virus Bulletin’s new email security tests, which we expect to come under the AMTSO Standard shortly
From our Standard compliance team
Public Test Notifications issued
- MRG Effitas, November 2026 360 Degree Consumer Assessment and Certification (AMTSO-LS1-TP219), 4 Nov 2026
- MRG Effitas, Q4 2026 360 Degree Android Assessment and Certification (AMTSO-LS1-TP220), 4 Nov 2026
- MRG Effitas, Q4 2026 360 Degree Enterprise Assessment and Certification (Endpoint) (AMTSO-LS1-TP221), 4 Nov 2026
Compliance Reports issued after Phase 2 Commentary
- AV-TEST, September Android Consumer 2026 Test Report (AMTSO-LS1-TP184), 3 Nov 2026
- AppEsteem, April–October 2026 testing, 2026 UwS Test Series (AMTSO-LS1-TP180), 2 Nov 2026
Phase 2 Commentary Collection
- Venak Security, Q4 2026 Zero-Day AV/EDR Test Report (AMTSO-LS1-TP214). Closed 9 Nov 2026; compliance confirmation pending
- MRG Effitas, Q3 2026 Android Efficacy Assessment Test Report (AMTSO-LS1-TP209). Expected to close 17 Nov 2026
- MRG Effitas, Q3 2026 360-Degree Endpoint Assessment and Certification Test Report (AMTSO-LS1-TP210). Expected to close 17 Nov 2026
- SE Labs, Q3 2026 Endpoint Protection Tests (AMTSO-LS1-TP208). Expected to close 19 Nov 2026
See every published and upcoming test AMTSO tracks in our Test Calendar.
Board and Management
AMTSO’s testing now reaches well beyond anti-malware, into VPNs, scam and phishing protection, agentic AI security, sandboxes and more. This week, the Board and exec team held a special call to review our core remit and mission in that light. A follow-up meeting next week will finalize it, ahead of the November Board meeting the week after.
Membership
Please welcome our newest member, 1stProtect.ai. Interested in joining AMTSO? Find out more on our membership page.
Stay in the loop
Talks, reports and community news, as they happen. Follow AMTSO on LinkedIn and YouTube and sign up to our newsletter.