Original research, technical analysis, and practical insights from the front lines of offensive security.
Our Mission
Autonomous discovery. Human analysis. Published for the people who need it most.
Research feed
All research
Research01/02How XBOW Found a Critical RCE in an EAC Voting Resource Calculator
byAriel Walter GarciaXBOW identified an unauthenticated, Critical-severity Remote Code Execution vulnerability in a public web application belonging to the U.S. Election Assistance Commission (EAC), the independent, bipartisan federal commission that focuses on election administration.
Research02/02No Time to Pwn: CVE-2026-72018
byBaul LeeXBOW found and exploited CVE-2026-72018, a Linux kernel bug human reviewers had passed over. The primitive looked too weak to matter, but it wasn't. Here's how a 16-byte write became root, and where autonomous research still needed a human call.Subscribe
Get XBOW Labs updates in your inbox
Subscribe to XBOW Labs and get occasional emails featuring our latest research, technical write-ups, event recordings, webinars, and talks—delivered only when we have something worth sharing.
Security with a hacker edge
Great security starts with an attacker's mindset. XBOW Labs publishes original research, technical analysis, and practical findings from the front lines of offensive security.
read more about labsOur team
Our team includes security researchers, AI engineers, and product builders working together to uncover real-world vulnerabilities.
