Skip to main content
PHP2shellXBOW now tests for it and proves what is exploitable. Patch today, then prove it.
Black Hat Europe 2026The future is zero days away. Meet us in London.
AWS re:Invent 2026The future is zero days away. Meet us in Vegas.

Blog

Security Research
‍Autonomous Offense IRL: What Anthropic’s GTG‑1002 Exposes, and How We Scale the Fight Back

‍Autonomous Offense IRL: What Anthropic’s GTG‑1002 Exposes, and How We Scale the Fight Back

Nico Waisman
Security Research
Tales From the Trace: How XBOW Reasons Its Way Into Finding IDORs

Tales From the Trace: How XBOW Reasons Its Way Into Finding IDORs

Adrian Losada Pita
Security Research
Security in 2026: Preparing for Machine-Speed Attacks

Security in 2026: What Breaks, What Scales, and What Survives

XBOW Team
Security Research
React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond

React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond

Nico Waisman
Security Research
How Companies Can Test Their Systems Against AI-powered Attacks Like GTG-1002

How Companies Can Test Their Systems Against AI-powered Attacks Like GTG-1002

Aqeel Siddiqui
Security Research
Cooking an SQL Injection Vulnerability in Chef Automate

Cooking an SQL Injection Vulnerability in Chef Automate

Javier Gil
Security Research
The Chaos Phase: How AI is Transforming Cybersecurity Threats

The Chaos Phase: How AI is Transforming Cybersecurity Threats

Oege de Moor
Security Research
CVE-2025-27888: Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint

CVE-2025-27888: Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint

Nico Waisman
Security Research
The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.

The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.

Nico Waisman