Posts by Nico Waisman on the XBOW blog
17 posts- Security Research
A Shell Is Worth a Thousand Images: Bing Images RCEs
Three critical Microsoft RCEs found autonomously: how attacker-controlled input becomes code inside the "boring" helpers applications treat as plumbing.
- AI Research
The OpenAI and Hugging Face Incident: When the Model Hacks the Test
Pre-release models escaped a sandbox and exploited real systems to win a benchmark, showing why powerful AI agents need external controls, strict scoping, and independent validation.
- Company News
GPT-5.5: Democratizing Cyber Capabilities
Today, OpenAI released GPT 5.5, its answer to Anthropic’s Mythos. The two companies took very different paths. This is the same old security question: who gets access to powerful tools and research?
- Security Research
Three Critical RCE Vulnerabilities in Microsoft Software Identified Autonomously by XBOW
For the first time, autonomous AI uncovered critical RCE vulnerabilities in Microsoft Cloud, demonstrating how AI-driven pentesting is accelerating real-world exploit discovery.
- Security Research
Autonomous Offense IRL: What Anthropic’s GTG‑1002 Exposes, and How We Scale the Fight Back
AI-enabled attacks are here. Anthropic’s GTG-1002 shows an LLM executing most of a real attack lifecycle, highlighting the need for defenses validated against AI-level threats.
- Security Research
React2Shell (CVE-2025-55182): A Wake-Up Call for Modern Web Security and How XBOW Helps You Respond
React2Shell (CVE-2025-55182) enables unauthenticated RCE, allowing attackers to execute arbitrary commands on backend systems via a UI framework vulnerability.
- Company News
From HackerOne’s Leaderboard to the NYSE Floor: Our Journey to the Cyber60
From HackerOne’s leaderboard to the NYSE, XBOW’s Cyber60 milestone advances its mission to democratize expert-level offensive security for every company.
- Security Research
CVE-2025-27888: Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint
History doesn't always repeat itself, but it often rhymes. How XBOW turned knowledge of old CVEs into a new zero-day SSRF (CVE-2025-27888) in Apache Druid.
- Company News
XBOW on HackerOne: What’s Next
XBOW reached #1 on HackerOne’s leaderboard, proving AI can match human security researchers. Now the focus shifts to integrating XBOW into pre-production workflows.
- Company News
Black Hat & DEF CON: Running XBOW Live, Presentation Slides, and The Talk You Didn’t Miss
A recap of our week at Black Hat and DEF CON, where we put XBOW to the ultimate test: running it live against real targets and discovering dozens of vulnerabilities.
- Security Research
The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.
As much as an AI might get discouraged, it’s also incredibly relentless in its pursuit.
- Security Research
How XBOW Turned a JavaScript Hint Into a Working File Inclusion
The XBOW bug bounty effort continues, and this time it uncovered a critical local file inclusion vulnerability by transforming an intriguing SSRF into a full file read exploit.
- Company News
The Road to Top 1: How XBOW Did It
For the first time in bug bounty history, an autonomous penetration tester has reached the top spot on the US leaderboard.
- Security Research
The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project
XBOW discovered an arbitrary file download vulnerability on the WPS open source app Zoo-Project.
- Security Research
SSRF & URI Validation Bypass in 2FAuth
XBOW discovered a Server-Side Request Forgery (SSRF) vulnerability in the OTP preview feature of the open-source project, 2FAuth.
- Security Research
How XBOW Found a Scoold Authentication Bypass
XBOW shifts from benchmarks to real-world findings, starting with an authentication bypass discovered in Scoold, a widely used open-source Q&A platform.
- AI Research
XBOW Validation Benchmarks: Show Me the Numbers!
XBOW is currently making 104 benchmarks available to the public. This allows other security products, tools, and researchers to use and explore these benchmarks.