Blog
Security Research
How Companies Can Test Their Systems Against AI-powered Attacks Like GTG-1002
Aqeel SiddiquiSecurity Research
Cooking an SQL Injection Vulnerability in Chef Automate
Javier GilSecurity Research
The Chaos Phase: How AI is Transforming Cybersecurity Threats
Oege de MoorSecurity Research
CVE-2025-27888: Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint
Nico WaismanSecurity Research
The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.
Nico WaismanSecurity Research
Another Byte Bites the Dust - How XBOW Turned a Blind SSRF into a File Reading Oracle
Alvaro MuñozSecurity Research
Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution
Alvaro MuñozSecurity Research
How XBOW Turned a JavaScript Hint Into a Working File Inclusion
Nico WaismanSecurity Research
