The Curious Engineer

All blogs / Security

XBOW

xbow.com/blog

Explore research, technical insights, and expert perspectives on AI pentesting, vulnerability discovery, exploit validation, and autonomous offensive security.

SecurityAI / ML

’23’24’25’26
Posts
109 from 30 Jul 2023 to 30 Oct 2026
Posting
weekly (78 in the last year)
Kind
company blog

2026 76

  1. Security ResearchSeptember 28, 2026No Time to Pwn: CVE-2026-72018Baul LeeBaul Lee
  2. Offensive Security AcademyOctober 28, 2026The AI Vulnerability Flood: Beating Alert Fatigue with ValidationXBOW TeamXBOW Team
  3. ProductOctober 14, 2026XBOW Data Residency now Available in Australia, Canada, and JapanDebbie Wood, Luke CarteyDebbie Wood, Luke Cartey
  4. Offensive Security AcademyOctober 16, 2026A Vulnerability Is a Hypothesis. An Exploit Is the Proof.Alvaro MuñozAlvaro Muñoz
  5. ProductOctober 20, 2026XBOW의 자율형 노출 관리(Autonomous Exposure Management) 서비스 국내 출시, 공격자의 시선으로 애플리케이션의 취약점을 진단Zach Jacobs, Jamie KangZach Jacobs, Jamie Kang
  6. AI ResearchNovember 6, 2026Top AI Models for Offensive Security, Fall 2026: Why Cost Changes EverythingAlbert Ziegler, Steve BuckleyAlbert Ziegler, Steve Buckley
  7. Offensive Security AcademyOctober 22, 2026Don't Make It Easy for Attackers: 5 Common AppSec GapsJulian Totzek-HallhuberJulian Totzek-Hallhuber
  8. ProductOctober 27, 2026PHP2shell: Patch Today, Then Prove ItSarah HyattSarah Hyatt
  9. ProductNovember 2, 2026Introducing Self-Serve Reporting: Evidence You Generate YourselfDavid MinkovskiDavid Minkovski
  10. Security ResearchOctober 13, 2026XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six DaysXBOW recently discovered and built a Chrome full-chain exploit affecting an estimated billion users globally, showing how an attacker could use Chrome to remotely take over a Windows machine.
  11. Offensive Security AcademyOctober 30, 2026How Attackers Are Using AI & What Defenders Must DoSuzanne CicconeSuzanne Ciccone
  12. Offensive Security AcademyMITRE ATT&CK Coverage Assessment: How to Measure Defensive ReadinessSuzanne CicconeSuzanne Ciccone
  13. APT Attacks explained: how Threat Actors Exploit your Attack Surface | XBOW
  14. Autonomous Exposure Management: Offensive Security at Enterprise Scale | XBOW
  15. Grok 4.7 for Offensive Security: Orchestration Matters | XBOW
  16. XBOW Integration for Jira: Validated Findings in Your Workflow | XBOW
  17. De-Duplicating Security Findings at Scale | XBOW
  18. AI Pentesting Vendor RFP Guide: Questions, Criteria and Frameworks | XBOW
  19. Continuous Attack Surface Testing vs. Penetration Testing | XBOW
  20. Threat Hunting with AI & Autonomous Pentesting | XBOW
  21. Vulnerability Management Automation: Prioritize Risk | XBOW
  22. ECB Makes Autonomous Offensive Security a Board Priority | XBOW
  23. Black Hat 2026: Hacking the Past, Hacking the Future | XBOW
  24. Autonomous Agent Safety: Hard Scoping and Guardrails | XBOW
  25. AI Threat Hunting and Autonomous Pentesting Tools | XBOW
  26. AI Pentesting: Cost, Coverage & Risk Reduction | XBOW
  27. AI Pentesting Legal Boundaries: Authorization Laws & Engagement Rules | XBOW
  28. Grok 4.5: Powerful AI, Safely Controlled by XBOW | XBOW
  29. AI Pentesting Tool Renewal: 7 Performance Signals | XBOW
  30. Bing Images RCEs: How XBOW Found Three Critical Flaws | XBOW
  31. OpenAI and Hugging Face: When AI Hacks the Test | XBOW
  32. AI Pentesting vs. Red Teaming: Key Differences | XBOW
  33. BAS vs. Red Team vs. Pentesting: How to Choose | XBOW
  34. AI Pentesting Adoption Challenges | XBOW
  35. Grok 4.5 for Offensive Security: Performance vs. Cost | XBOW
  36. Human-in-the-Loop AI Pentesting: What It HIL in Pentesting & Why It Works | XBOW
  37. Muse Spark vs. GLM: AI Models for Offensive Security | XBOW
  38. Continuous Vulnerability Testing for Small Security Teams | XBOW
  39. Can AI replace human pentesters? What security teams need to know | XBOW
  40. AI Pentesting vs Vulnerability Scanners: Key Differences | XBOW
  41. Enterprise Pentesting Best Practices for Security Teams | XBOW
  42. How CISOs can close the AI security gap before it widens | XBOW
  43. GPT-5.5 and XBOW: A New Era of Autonomous AppSec | XBOW
  44. Mythos and GPT-5.5: What AI Vulnerability Detection Misses | XBOW
  45. How XBOW Finds IDORs with High Accuracy and Low Noise | XBOW
  46. Ethical AI Penetration Testing Governance Framework | XBOW
  47. Mythos for Offensive Security: XBOW Evaluation | XBOW
  48. 10 Red Flags in AI Pentesting Vendor Evaluations | XBOW
  49. Insecure Direct Object Reference (IDOR): Real-World Example & How to Test for It | XBOW
  50. How to Evaluate an AI Pentesting Vendor: A Buyer’s Framework | XBOW
  51. Democratizing Cybersecurity with AI | XBOW
  52. Mythos AI Hacking: Risks of Open Access | XBOW
  53. We Tested Anthropic's Opus 4.7 - What You Need to Know | XBOW
  54. Continuous Offensive Security in DevSecOps Pipelines | XBOW
  55. AI Pentesting: Strengths, Gaps, and Validation | XBOW
  56. AI Attack Path Analysis and Exploitation Planning | XBOW
  57. Machine Learning for Vulnerability Discovery | XBOW
  58. XBOW Finds Critical Microsoft RCE Vulnerabilities | XBOW
  59. XBOW EU Data Residency for AI Penetration Testing | XBOW
  60. XBOW Public API: Automate AI-Driven Penetration Testing | XBOW
  61. Anthropic GTG-1002: AI Cyberattack Analysis | XBOW
  62. Continuous Offensive Security with Microsoft | XBOW
  63. XBOW Raises Series B to Advance Autonomous Penetration Testing | XBOW
  64. Core Components of an AI Pentesting Framework | XBOW
  65. Introducing Assessment Guidance for AI Pentesting | XBOW
  66. How AI Is Transforming Offensive Security | XBOW
  67. We Ran 1,060 Autonomous Attacks: What We Learned | XBOW
  68. Context-Aware AI Vulnerability Reports Explained | XBOW
  69. Traditional vs AI Pentesting: Key Differences | XBOW
  70. How Often Should You Run Penetration Testing? | XBOW
  71. XBOW on AWS Marketplace: Autonomous Pentesting for AWS | XBOW
  72. Finding IDOR Vulnerabilities with AI: XBOW in Action | XBOW
  73. What Is AI Pentesting? A Practical Guide | XBOW
  74. Context-Aware AI for Vulnerability Reporting | XBOW
  75. Why LLMs Hallucinate Vulnerabilities in Security Testing | XBOW
  76. Security in 2026: Preparing for Machine-Speed Attacks | XBOW

2025 22

  1. React2Shell (CVE-2025-55182) RCE Vulnerability | XBOW
  2. Test Against AI-Powered Attacks: GTG1002 Explained | XBOW
  3. Democratizing Offensive Security with AI Penetration Testing | XBOW
  4. Agentic AI in Security Testing: Merging SAST and DAST | XBOW
  5. Chef Automate SQL Injection Vulnerability Explained | XBOW
  6. AI Cybersecurity Threats 2025: The Chaos Phase Explained | XBOW
  7. Apache Druid Proxy Vulnerability Explained | XBOW
  8. AI in Cybersecurity: Empowering Defenders with Autonomous Pentesting | XBOW
  9. XBOW on HackerOne: What’s Next for AI Pen Testing | XBOW
  10. XBOW Unleashes GPT-5’s Hidden Hacking Power, Doubling Performance | XBOW
  11. Black Hat 2025: Key Offensive Security Insights | XBOW
  12. Vanta Vulnerability Analysis: SQL Injection and Security Risk | XBOW
  13. Titiler RCE Vulnerability: Remote Code Execution Explained | XBOW
  14. TiTiler LFI Vulnerability: Discovery and Exploitation | XBOW
  15. Titiler RCE Vulnerability Explained | XBOW
  16. How XBOW Turned a JavaScript Hint Into a Working File Inclusion | XBOW
  17. Alloy Agents: Scaling Autonomous Vulnerability Detection | XBOW
  18. Z-Push SQL Injection Vulnerability Explained | XBOW
  19. Salesforce XSS Vulnerability | XBOW
  20. Akamai CloudTest XXE Vulnerability Exploited by XBOW | XBOW
  21. XBOW Finds GlobalProtect XSS Vulnerability | XBOW
  22. How XBOW Ranked #1 in Autonomous Penetration Testing | XBOW

2024 10

  1. XBOW Zoo ARB: Autonomous Pentesting | XBOW
  2. Stored XSS in 2FAuth (CVE-2024-52597) | AI-Powered Exploit by XBOW | XBOW
  3. Eddi Path Traversal Vulnerability: Real-World Finding | XBOW
  4. 2FAuth SSRF Vulnerability: Real-World Exploit | XBOW
  5. Scoold Authentication Bypass: Real-World Finding | XBOW
  6. XBOW Penetration Testing Benchmarks: Metrics That Matter | XBOW
  7. WordPress Ninja Tables Vulnerability Analysis | XBOW
  8. XBOW vs Human Pentesters: AI vs Manual Security Testing | XBOW
  9. Breaking Cryptography with AI: XBOW Offensive Security | XBOW
  10. Introducing XBOW: AI-Powered Offensive Security Platform | XBOW

2023 1

  1. XBOW Raises $20M Seed to Scale AI Penetration Testing | XBOW