“Exploit proof” needs to rise to the top of your remediation program as a key modifier for findings, says Moderna Deputy CISO Farzan Karimi in a recent webinar with XBOW co-founder Nico Waisman. Hear more from Farzan below. Watch full webinar recording here: https://bit.ly/4eIForC

The Five Eyes cyber security agencies confirmed that AI-driven cyber risk is imminent. As the gap between discovery and exploitation shrinks, continuous, autonomous security testing becomes essential. That's the problem XBOW was built to solve. Read the full statement: https://bit.ly/4vsuzkh

How does XBOW identify business logic flaws? Hear from XBOW security researcher Alvaro Muñoz in the clip below. Get more of his thoughts on business logic flaws and how to address them in his new blog: https://bit.ly/4fKEpsP

In a new episode of the Cyberwire podcast, “Vulnerability response. Built for humans, outpaced by machines,” XBOW Head of Security Labs Federico Kirschbaum shares his perspective on vulnerability management when frontier models are finding the flaws. Listen to the episode: https://bit.ly/4epV5ov

What would it take to build an AI-powered offensive security tool? We highlight the cost below. Get full details in our new whitepaper: https://bit.ly/4eqcEDH

AI Tinkerers is hosting an offensive security demo night on June 25 with XBOW. Live exploits, autonomous pentesting, LLM-assisted vulnerability discovery, code walkthroughs, and technical Q&A. No decks. No pitches. Working systems only. RSVP: https://bit.ly/3SdPtVS

Why are design flaws like IDOR so hard to find with automation? XBOW security researcher Alvaro Muñoz explains in the clip below. Get more of his thoughts on business logic flaws and how to address them in his new blog: https://bit.ly/4fKEpsP

If an organization can point a powerful language model at an application and unearth findings, is it effectively running a penetration test? Our new whitepaper breaks down where LLMs are powerful tools for pentesting, and where they need more support: https://bit.ly/4eqcEDH

We're honored that XBOW has been named a winner of Fast Company's 2026 World Changing Ideas Awards in the Business Products & Services category. This recognition reflects the work of our partners & research team, who believe the future of security is autonomous offense. More: https://bit.ly/4epnGca

LLMs excel at following instructions, but not always at identifying which instructions to trust. XBOW Head of AI Albert Ziegler explains why prompt injection risk grows alongside AI agency and enterprise access in IBT Media. Read on: https://bit.ly/3S3pZdO

Samsung SDS announced that it is partnering with XBOW to strengthen its cybersecurity capabilities, using XBOW to uncover hidden vulnerabilities through attack simulations and accelerate identification and remediation with unmatched speed and precision. Get details: https://bit.ly/4oo3zjs

“AI is changing the story of design flaw identification, says XBOW security researcher Alvaro Muñoz in the clip below. Get more of his thoughts on business logic flaws and how to address them in his new blog: https://bit.ly/4fKEpsP

Great spending time with the GuidePoint Security team and customers this week at the GuidePoint Security Golf Classic at Terry Hills. As attack surfaces grow and vulnerabilities multiply, strong partnerships matter. Together, we're helping organizations validate real, exploitable risk.

“Is my application security program built for a world where everyone is a coder?” Read why our CISO, Nico Waisman, believes this question should be top of mind for today’s CISOs in CSO Online: https://bit.ly/4um5upQ

How does AI pentesting work? What should you look for? Get some guidance in our blog post "How to Evaluate an AI Pentesting Vendor: A Decision Framework for Security Leaders." https://bit.ly/4edHyPM

• Why can't traditional pentests keep up with modern attack surfaces? • What stops an autonomous pentesting agent from causing real damage in production? Our CISO answers these questions and more on the Security You Should Know podcast. Listen to the full episode: https://bit.ly/4eiMXWM

Moderna Deputy CISO Farzan Karimi shared how XBOW uncovered attack paths human testers missed, including one that took down a development environment during a trial. This @cyberscoop.bsky.social piece examines what happens when offensive security moves at machine speed: https://bit.ly/4va5Pxr

One theme came up repeatedly at InfoSecurity Europe: ➡️ Security teams want proof, not possibility. Great discussions all week with leaders thinking about autonomous offensive security and operational validation at scale. Thanks to everyone who connected with our team.

On June 10, XBOW CISO Nico Waisman and Moderna Deputy CISO Farzan Karimi will discuss the impact of autonomous, continuous, and exploit-validated offensive security in today’s AI threat landscape. Join us: https://bit.ly/42zUvxV

GPT-5.5 is now part of XBOW. In our testing, GPT-5.5 delivered major gains in vulnerability discovery, exploit reasoning, application interaction, and autonomous testing. Models provide the intelligence. XBOW turns it into autonomous application security. Read more: https://bit.ly/4ufvhAb

Thank you to everyone who joined yesterday's #GartnerSEC session with Farzan Karimi and Troy West of Moderna to learn how they're building an autonomous offensive security program with XBOW! It’s day two, and we’re ready to talk all things autonomous offensive security. Find us at booth 1028!

Today at #Infosec2026, attendees will get a chance to put offensive security to the test during our workshop: Offensive AI in Practice. See firsthand how AI amplifies attackers’ abilities and how offensive security tools find, exploit, validate, and remediate them. Register: https://bit.ly/4d9cd19

Our team is at #Infosec2026 today through Thursday! Stop by booth F-135 to say hi to the team 👋 and learn how your organization can scale offensive security with XBOW. 🏹 https://bit.ly/3P1Vkwj

If you’re at Gartner Security & Risk Management Summit today, find the XBOW team at booth 1028 📍 to learn about autonomous offensive security and how it’s enabling teams to defend against complex and evolving cyberthreats faster, better, and at scale: https://gtnr.it/2Mf36ll #GartnerSEC

Attending Gartner Security & Risk Management Summit? Tune in as Moderna’s Farzan Karimi and Troy West take the stage to share how XBOW enables them to meet the demands of today’s AI-driven cybersecurity landscape. 🔔 TODAY at 02:05 PM EDT: https://gtnr.it/4nQofA6 #GartnerSEC

AI models are getting better at finding vulnerabilities, but detection alone isn’t enough. @cyberscoop.bsky.social covers the early results on Mythos Preview, including XBOW’s evaluation. Read more: https://bit.ly/4e4JqeC

AI models are getting better at finding vulnerabilities, but detection alone isn’t enough. @cyberscoop.bsky.social covers the early results on Mythos Preview, including XBOW’s evaluation. Read more: https://bit.ly/4e4JqeC

On June 16 at 11AM EDT, XBOW Lead Solutions Architect Bill Reyor will break down why security leaders are moving beyond periodic assessments toward continuous offensive security testing. If your exposure changes daily, your testing strategy should too. Register at the link: https://bit.ly/42Nm472

Finding IDORs with automation is hard. Most tools stop at "Can I access this?". XBOW had to answer, "Should I be able to?" Here’s how we did it. https://bit.ly/4fKEpsP

Meet XBOW at the Gartner Security & Risk Management Summit next week at Booth 1028! 📍 Plus, don't miss Moderna’s session where Farzan Karimi and Troy West will discuss how they’re working with XBOW to dramatically increase the speed, scale, and continuity of testing: https://gtnr.it/4nQofA6

The Future of Pen Testing Is Continuous Security Testing Gartner® research on why point-in-time testing can no longer keep pace and what security leaders are doing instead. Download the report now: https://bit.ly/4dpavZF

XBOW's @moyix.net recently joined @grahamcluley.com on the @smashingsecurity.com podcast to discuss: ° Some of the vulnerabilities XBOW has uncovered ° The pros and cons of AI for pentesting ° AI's impact on vulnerability discovery and disclosure ° And more Listen here: https://bit.ly/42SYK7R

In less than two weeks at Infosecurity Europe 2026, XBOW will lead a hands-on workshop: Offensive AI in Practice. 📍 June 2nd, 2pm BST South Gallery Room 18 @ ExCeL London Secure your spot: https://bit.ly/4d9cd19

Finding vulnerabilities is becoming easier. Validating what actually matters is the hard part. SecurityWeek highlights XBOW’s benchmarking of Anthropic’s Mythos Preview across vulnerability discovery, reverse engineering, and exploit validation tasks. Here are the findings: https://bit.ly/4tKZCGE

Find advice from our recent panel discussion at RSAC with Nico Waisman, XBOW CISO; Jason Haddix, Arcanum CEO; Dave Aitel, Technical Staff, OpenAI, below, and get all their insights in our new whitepaper, The Next Six Months of Offensive Security: What CISOs Need to Change Now: https://bit.ly/4dijSZS

XBOW found CVE-2026-45185, reported it responsibly, then used the disclosure window to test a harder question: How far can autonomous exploit development go against real-world native code? Full write-up here: https://bit.ly/42yKTmX

What’s holding security teams back? Find out your peers’ 2026 challenges, priorities, and strategies in this year’s 2026 Cyberthreat Defense Report by CyberEdge Group, sponsored in part by XBOW: https://bit.ly/4udV6kK

In BleepingComputer, Bill Toulas covers XBOW’s discovery of CVE-2026-45185, a critical unauthenticated Exim RCE, and the crucial role AI tools play in helping security researchers to understand unfamiliar code and investigate vulnerabilities faster. Read on: https://bit.ly/3Rg6MoM

Join us at Infosecurity Europe 2026 to meet the team behind XBOW and learn how autonomous offensive security is revolutionizing modern AppSec programs. Book time with the team for demos, conversations, and a closer look at AI-driven offensive security in practice: https://bit.ly/3P1Vkwj

One key takeaway after analyzing Mythos Preview for 2 months: powerful for source code audits, less so for validating exploits. See our full evaluation: https://bit.ly/42zQl98

“XBOW found that Mythos was ‘good, but less powerful, at validating exploits’ and that the model could be ‘too literal and conservative,’ sometimes overstating the practical significance of its findings,” writes Sam Sabin in @axios.com. More on our analysis of Mythos Preview: https://bit.ly/4tA87Eo

Join XBOW CISO Nico Waisman and Moderna Deputy CISO Farzan Karimi, on June 10 for a virtual coffee and chocolate tasting with security leaders. We’ll discuss what risk-based security looks like when offensive capability operates at machine speed. RSVP to claim your spot: https://bit.ly/42zUvxV

The Hacker News’s Ravie Lakshmanan covers a newly disclosed Exim vulnerability discovered and responsibly reported by XBOW. Research like this helps uncover high-impact vulnerabilities before attackers do. Read more in @thehackernews.com.web.brid.gy ⬇️

Our new whitepaper, The Next Six Months of Offensive Security: What CISOs Need to Change Now, highlights the perspectives shared and the RSAC panelists’ thoughts about, questions on, and recommendations for this next phase of cybersecurity. Explore the whitepaper: https://bit.ly/4dijSZS

At Infosecurity Europe 2026, we’re hosting a hands-on workshop where participants will use open source offensive tooling and AI models to safely exploit vulnerable applications in a controlled environment. June 2 | 2pm BST | ExCeL London Save your spot: https://bit.ly/4d9cd19

We are pleased to announce that we have joined the @awscloud.bsky.social Independent Software Vendor (ISV) Accelerate Program, a co-sell program for AWS Partners that provides software solutions that run on or integrate with AWS. Get details: https://bit.ly/4nlYaIY

For the past 2 months, XBOW has been testing Mythos Preview under embargo as part of a select early-access group. Findings: Mythos Preview is a major advance, but it’s not perfect. Read where it shines, where it needs support, and what this means for offensive security: bit.ly/42zQl98

The flood of vulnerabilities coming from Mythos won’t all be exploitable. CEO and CISO Jason Haddix and XBOW AI researcher Brendan Dolan-Gavitt discuss in the clip below. Watch their full discussion on “security in a post-Mythos world” here: https://bit.ly/4mHo3Te

🏹 XBOW Extends Its Series C, Securing an Additional $35M From Strategic Investors The raise, which includes participation from customers and partners, highlights that enterprises are not just adopting XBOW’s platform, but investing in it. Learn more: https://bit.ly/4d37ZXz

In our benchmark, GPT-5 missed 40% of vulnerabilities. Opus 4.6 reduced that to 18%. GPT-5.5 brings it down further to just 10%. When you’re running automated security testing, closing that gap matters. Get details in our blog post: https://bit.ly/48OX7v6