The Curious Engineer

All blogs / Security

XBOW

xbow.com/blog

Explore research, technical insights, and expert perspectives on AI pentesting, vulnerability discovery, exploit validation, and autonomous offensive security.

SecurityAI / ML

’23’24’25’26
Posts
106 from 30 Jul 2023 to 22 Oct 2026
Posting
weekly (76 in the last year)
Kind
company blog

2026 73

  1. ProductSeptember 24, 2026Introducing Autonomous Exposure Management: Offensive Security at Enterprise ScaleZach JacobsZach Jacobs
  2. Offensive Security AcademySeptember 28, 2026APT Attacks Explained: How Threat Actors Exploit Your Attack SurfaceSuzanne CicconeSuzanne Ciccone
  3. Security ResearchSeptember 28, 2026No Time to Pwn: CVE-2026-72018Baul LeeBaul Lee
  4. ProductOctober 14, 2026XBOW Data Residency now Available in Australia, Canada, and JapanDebbie Wood, Luke CarteyDebbie Wood, Luke Cartey
  5. Security ResearchOctober 13, 2026XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six DaysXBOW recently discovered and built a Chrome full-chain exploit affecting an estimated billion users globally, showing how an attacker could use Chrome to remotely take over a Windows machine.
  6. Offensive Security AcademyOctober 16, 2026A Vulnerability Is a Hypothesis. An Exploit Is the Proof.Alvaro MuñozAlvaro Muñoz
  7. Offensive Security AcademyOctober 30, 2026How Attackers Are Using AI & What Defenders Must DoSuzanne CicconeSuzanne Ciccone
  8. ProductOctober 20, 2026XBOW의 자율형 노출 관리(Autonomous Exposure Management) 서비스 국내 출시, 공격자의 시선으로 애플리케이션의 취약점을 진단Zach Jacobs, Jamie KangZach Jacobs, Jamie Kang
  9. ProductOctober 27, 2026PHP2shell: Patch Today, Then Prove ItSarah HyattSarah Hyatt
  10. Offensive Security AcademyOctober 22, 2026Don't Make It Easy for Attackers: 5 Common AppSec GapsJulian Totzek-HallhuberJulian Totzek-Hallhuber
  11. Offensive Security AcademyMITRE ATT&CK Coverage Assessment: How to Measure Defensive ReadinessSuzanne CicconeSuzanne Ciccone
  12. Grok 4.7 for Offensive Security: Orchestration Matters | XBOW
  13. XBOW Integration for Jira: Validated Findings in Your Workflow | XBOW
  14. De-Duplicating Security Findings at Scale | XBOW
  15. AI Pentesting Vendor RFP Guide: Questions, Criteria and Frameworks | XBOW
  16. Continuous Attack Surface Testing vs. Penetration Testing | XBOW
  17. Threat Hunting with AI & Autonomous Pentesting | XBOW
  18. Vulnerability Management Automation: Prioritize Risk | XBOW
  19. ECB Makes Autonomous Offensive Security a Board Priority | XBOW
  20. Black Hat 2026: Hacking the Past, Hacking the Future | XBOW
  21. Autonomous Agent Safety: Hard Scoping and Guardrails | XBOW
  22. AI Threat Hunting and Autonomous Pentesting Tools | XBOW
  23. AI Pentesting: Cost, Coverage & Risk Reduction | XBOW
  24. AI Pentesting Legal Boundaries: Authorization Laws & Engagement Rules | XBOW
  25. Grok 4.5: Powerful AI, Safely Controlled by XBOW | XBOW
  26. AI Pentesting Tool Renewal: 7 Performance Signals | XBOW
  27. Bing Images RCEs: How XBOW Found Three Critical Flaws | XBOW
  28. OpenAI and Hugging Face: When AI Hacks the Test | XBOW
  29. AI Pentesting vs. Red Teaming: Key Differences | XBOW
  30. BAS vs. Red Team vs. Pentesting: How to Choose | XBOW
  31. AI Pentesting Adoption Challenges | XBOW
  32. Grok 4.5 for Offensive Security: Performance vs. Cost | XBOW
  33. Human-in-the-Loop AI Pentesting: What It HIL in Pentesting & Why It Works | XBOW
  34. Muse Spark vs. GLM: AI Models for Offensive Security | XBOW
  35. Continuous Vulnerability Testing for Small Security Teams | XBOW
  36. Can AI replace human pentesters? What security teams need to know | XBOW
  37. AI Pentesting vs Vulnerability Scanners: Key Differences | XBOW
  38. Enterprise Pentesting Best Practices for Security Teams | XBOW
  39. How CISOs can close the AI security gap before it widens | XBOW
  40. GPT-5.5 and XBOW: A New Era of Autonomous AppSec | XBOW
  41. Mythos and GPT-5.5: What AI Vulnerability Detection Misses | XBOW
  42. How XBOW Finds IDORs with High Accuracy and Low Noise | XBOW
  43. Ethical AI Penetration Testing Governance Framework | XBOW
  44. Mythos for Offensive Security: XBOW Evaluation | XBOW
  45. 10 Red Flags in AI Pentesting Vendor Evaluations | XBOW
  46. Insecure Direct Object Reference (IDOR): Real-World Example & How to Test for It | XBOW
  47. How to Evaluate an AI Pentesting Vendor: A Buyer’s Framework | XBOW
  48. Democratizing Cybersecurity with AI | XBOW
  49. Mythos AI Hacking: Risks of Open Access | XBOW
  50. We Tested Anthropic's Opus 4.7 - What You Need to Know | XBOW
  51. Continuous Offensive Security in DevSecOps Pipelines | XBOW
  52. AI Pentesting: Strengths, Gaps, and Validation | XBOW
  53. AI Attack Path Analysis and Exploitation Planning | XBOW
  54. Machine Learning for Vulnerability Discovery | XBOW
  55. XBOW Finds Critical Microsoft RCE Vulnerabilities | XBOW
  56. XBOW EU Data Residency for AI Penetration Testing | XBOW
  57. XBOW Public API: Automate AI-Driven Penetration Testing | XBOW
  58. Anthropic GTG-1002: AI Cyberattack Analysis | XBOW
  59. Continuous Offensive Security with Microsoft | XBOW
  60. XBOW Raises Series B to Advance Autonomous Penetration Testing | XBOW
  61. Core Components of an AI Pentesting Framework | XBOW
  62. Introducing Assessment Guidance for AI Pentesting | XBOW
  63. How AI Is Transforming Offensive Security | XBOW
  64. We Ran 1,060 Autonomous Attacks: What We Learned | XBOW
  65. Context-Aware AI Vulnerability Reports Explained | XBOW
  66. Traditional vs AI Pentesting: Key Differences | XBOW
  67. How Often Should You Run Penetration Testing? | XBOW
  68. XBOW on AWS Marketplace: Autonomous Pentesting for AWS | XBOW
  69. Finding IDOR Vulnerabilities with AI: XBOW in Action | XBOW
  70. What Is AI Pentesting? A Practical Guide | XBOW
  71. Context-Aware AI for Vulnerability Reporting | XBOW
  72. Why LLMs Hallucinate Vulnerabilities in Security Testing | XBOW
  73. Security in 2026: Preparing for Machine-Speed Attacks | XBOW

2025 22

  1. React2Shell (CVE-2025-55182) RCE Vulnerability | XBOW
  2. Test Against AI-Powered Attacks: GTG1002 Explained | XBOW
  3. Democratizing Offensive Security with AI Penetration Testing | XBOW
  4. Agentic AI in Security Testing: Merging SAST and DAST | XBOW
  5. Chef Automate SQL Injection Vulnerability Explained | XBOW
  6. AI Cybersecurity Threats 2025: The Chaos Phase Explained | XBOW
  7. Apache Druid Proxy Vulnerability Explained | XBOW
  8. AI in Cybersecurity: Empowering Defenders with Autonomous Pentesting | XBOW
  9. XBOW on HackerOne: What’s Next for AI Pen Testing | XBOW
  10. XBOW Unleashes GPT-5’s Hidden Hacking Power, Doubling Performance | XBOW
  11. Black Hat 2025: Key Offensive Security Insights | XBOW
  12. Vanta Vulnerability Analysis: SQL Injection and Security Risk | XBOW
  13. Titiler RCE Vulnerability: Remote Code Execution Explained | XBOW
  14. TiTiler LFI Vulnerability: Discovery and Exploitation | XBOW
  15. Titiler RCE Vulnerability Explained | XBOW
  16. How XBOW Turned a JavaScript Hint Into a Working File Inclusion | XBOW
  17. Alloy Agents: Scaling Autonomous Vulnerability Detection | XBOW
  18. Z-Push SQL Injection Vulnerability Explained | XBOW
  19. Salesforce XSS Vulnerability | XBOW
  20. Akamai CloudTest XXE Vulnerability Exploited by XBOW | XBOW
  21. XBOW Finds GlobalProtect XSS Vulnerability | XBOW
  22. How XBOW Ranked #1 in Autonomous Penetration Testing | XBOW

2024 10

  1. XBOW Zoo ARB: Autonomous Pentesting | XBOW
  2. Stored XSS in 2FAuth (CVE-2024-52597) | AI-Powered Exploit by XBOW | XBOW
  3. Eddi Path Traversal Vulnerability: Real-World Finding | XBOW
  4. 2FAuth SSRF Vulnerability: Real-World Exploit | XBOW
  5. Scoold Authentication Bypass: Real-World Finding | XBOW
  6. XBOW Penetration Testing Benchmarks: Metrics That Matter | XBOW
  7. WordPress Ninja Tables Vulnerability Analysis | XBOW
  8. XBOW vs Human Pentesters: AI vs Manual Security Testing | XBOW
  9. Breaking Cryptography with AI: XBOW Offensive Security | XBOW
  10. Introducing XBOW: AI-Powered Offensive Security Platform | XBOW

2023 1

  1. XBOW Raises $20M Seed to Scale AI Penetration Testing | XBOW