https://xbow.com/blog Latest posts from the XBOW blog en-us https://xbow.com/blog/ai-pentesting-adoption-challenges-enterprise https://xbow.com/blog/ai-pentesting-adoption-challenges-enterprise Enterprise AI pentesting adoption depends on trusted findings, controlled testing, governance alignment, and integration with existing security workflows. Tue, 14 Jul 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/Grok-4-5-ai-model-offensive-security https://xbow.com/blog/Grok-4-5-ai-model-offensive-security Grok 4.5 delivers near frontier offensive security performance at a practical price, making it the strongest AI model for many real-world cybersecurity workloads in the middle of the cost curve. Fri, 10 Jul 2026 18:09:38 GMT Albert Ziegler AI Research https://xbow.com/blog/human-in-the-loop-ai-pentesting https://xbow.com/blog/human-in-the-loop-ai-pentesting AI is transforming penetration testing by automating security assessments, but the most effective approach combines autonomous AI with human oversight to deliver faster, more accurate, and context-aware results. Fri, 10 Jul 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/affordable-ai-models-glm-muse-spark-cybersecurity https://xbow.com/blog/affordable-ai-models-glm-muse-spark-cybersecurity Lower-cost AI models like Muse Spark 1.1 and GLM are rapidly improving, making AI-powered offensive security more accessible and changing the economics of vulnerability discovery. Thu, 09 Jul 2026 20:07:35 GMT Albert Ziegler AI Research https://xbow.com/blog/continuous-vulnerability-testing-small-teams https://xbow.com/blog/continuous-vulnerability-testing-small-teams Continuous vulnerability testing only reduces risk when teams prioritize exploitable findings, streamline remediation, and measure success by how quickly issues are fixed, not how many are found. Mon, 06 Jul 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/can-ai-replace-human-pentesters https://xbow.com/blog/can-ai-replace-human-pentesters AI pentesting accelerates vulnerability discovery and expands testing coverage, enabling human pentesters to focus on the complex, business logic-driven attacks where their expertise delivers the greatest value. Mon, 29 Jun 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/ai-pentesting-vs-vulnerability-scanners https://xbow.com/blog/ai-pentesting-vs-vulnerability-scanners AI pentesting goes beyond automated vulnerability scanning by proving which vulnerabilities are actually exploitable, dramatically reducing false positives and delivering more accurate, actionable security findings. Thu, 18 Jun 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/ai-pentesting-enterprise-large-security-teams https://xbow.com/blog/ai-pentesting-enterprise-large-security-teams Enterprise pentesting requires continuous, validated testing that scales with changing applications, helping security teams prioritize real risk, accelerate remediation, and maintain coverage across complex environments. Fri, 12 Jun 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/how-cisos-can-close-the-ai-security-gap https://xbow.com/blog/how-cisos-can-close-the-ai-security-gap AI is helping attackers move faster, not differently. Learn the practical steps CISOs can take now to strengthen security fundamentals, accelerate remediation, and prepare for AI-driven threats. Tue, 09 Jun 2026 12:00:00 GMT Suzanne Ciccone Security Research https://xbow.com/blog/gpt-5-5-and-xbow-a-step-change-in-autonomous-application-security https://xbow.com/blog/gpt-5-5-and-xbow-a-step-change-in-autonomous-application-security The most efficient vulnerability discovery model we’ve ever tested is now part of XBOW. Wed, 03 Jun 2026 12:00:00 GMT Christopher Ford AI Research https://xbow.com/blog/mythos-gpt-5-5-ai-vulnerability-detection-security https://xbow.com/blog/mythos-gpt-5-5-ai-vulnerability-detection-security Frontier AI models like Mythos and GPT-5.5 can uncover real vulnerabilities, but enterprise-ready offensive security requires much more than finding bugs, including coverage, validation, safety, governance, and operational integration. Tue, 02 Jun 2026 12:00:00 GMT Suzanne Ciccone AI Research https://xbow.com/blog/xbow-finds-idors-high-accuracy-ambiguous-context https://xbow.com/blog/xbow-finds-idors-high-accuracy-ambiguous-context By understanding expected access patterns before testing them, XBOW brings context-aware reasoning to complex authorization issues. Thu, 28 May 2026 12:00:00 GMT Alvaro Muñoz Product https://xbow.com/blog/ethical-considerations-ai-pentesting https://xbow.com/blog/ethical-considerations-ai-pentesting AI-driven pentesting introduces new governance challenges around authorization, accountability, privacy, and explainability, requiring security teams to pair autonomous testing with enforceable controls, validated findings, and human oversight. Fri, 22 May 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/dead-letter-cve-2026-45185-xbow-found-rce-exim https://xbow.com/blog/dead-letter-cve-2026-45185-xbow-found-rce-exim XBOW discovered CVE-2026-45185, a critical unauthenticated RCE in Exim, and used the disclosure window to test how far human and autonomous exploit development could go. Tue, 12 May 2026 14:00:00 GMT Federico Kirschbaum Andres Luksenberg Security Research https://xbow.com/blog/mythos-offensive-security-xbow-evaluation https://xbow.com/blog/mythos-offensive-security-xbow-evaluation We received early access to Mythos Preview for early capability testing a few weeks back. Today, we can finally share what we found. Tue, 12 May 2026 12:00:00 GMT Albert Ziegler Security Research https://xbow.com/blog/ai-pentest-vendors-red-flags https://xbow.com/blog/ai-pentest-vendors-red-flags AI pentesting helps security teams scale testing and improve efficiency, but many vendors overstate AI capabilities and results. To simplify evaluation, watch for key red flags and challenge questionable claims early in the process. Fri, 08 May 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/insecure-direct-object-reference-idor https://xbow.com/blog/insecure-direct-object-reference-idor IDORs are difficult because they live in the gap between what an application accepts and what it should allow. Finding them consistently requires persistence, context, and the ability to reason through business logic. Wed, 06 May 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/ai-pentesting-evaluation-guide https://xbow.com/blog/ai-pentesting-evaluation-guide AI pentesting helps scale offensive security by automating discovery, exploitation, and validation, with solutions ranging from assisted tools to fully autonomous agents. Mon, 27 Apr 2026 12:00:00 GMT XBOW Team Offensive Security Academy https://xbow.com/blog/democratizing-cyber-capabilities https://xbow.com/blog/democratizing-cyber-capabilities Today, OpenAI released GPT 5.5, its answer to Anthropic’s Mythos. The two companies took very different paths. This is the same old security question: who gets access to powerful tools and research? Thu, 23 Apr 2026 18:00:00 GMT Oege de Moor Nico Waisman Company News https://xbow.com/blog/mythos-like-hacking-open-to-all https://xbow.com/blog/mythos-like-hacking-open-to-all We had early access over the past few weeks and tested it across our benchmarks and workflows. Here’s how 5.5 performed for our offensive security capabilities. Thu, 23 Apr 2026 18:00:00 GMT Albert Ziegler Steve Buckley AI Research