XBOW

Keynotes come from the founders of @xbow.com and @cape.co. Thanks to them and to the other sponsors and partners, including Anaconda, Expel, Sonatype, JPMorganChase, CyberEdBoard and DCA Live.

DMV Rising, which @virtru.bsky.social co-sponsors, is now Day 1 of DC's new Cyber Innovation Conference on Oct 26. On Day 2, startups pitch investors at the DataTribe Challenge. Good to see the region's security leaders and founders under one banner. dmvrising.com

@moyix.net has LLM agents reverse-engineering the currency detectors inside photocopiers, then building a cat you can't photocopy. His conclusion: obscurity buys days now, not years. unprompted.au/schedule?utm... #AI #infosec

When was the last time you saw an AMQ computer in person? 🤘 We meant it when we said we're bringing all the nostalgia vibes to Black Hat...see you there at booth 3448: xbow.com/events/black...

We are pleased to announce that XBOW has achieved Application Security distinction for the special Autonomous Security Validation use case within the @awscloud.bsky.social (AWS) Security Competency. Learn more: xbow.com/news/xbow-ac...

Most security tools answer one question: what weaknesses exist here? They return a list, each item scored on its own. But attackers chain weaknesses. Finding these chains has historically required expensive human expertise. XBOW does this autonomously. Find out how: xbow.com/whitepapers/...

“Exploit proof” needs to rise to the top of your remediation program as a key modifier for findings, says Moderna Deputy CISO Farzan Karimi in a recent webinar with XBOW co-founder Nico Waisman. Hear more from Farzan below. Watch full webinar recording here: https://bit.ly/4eIForC

The Five Eyes cyber security agencies confirmed that AI-driven cyber risk is imminent. As the gap between discovery and exploitation shrinks, continuous, autonomous security testing becomes essential. That's the problem XBOW was built to solve. Read the full statement: https://bit.ly/4vsuzkh

How does XBOW identify business logic flaws? Hear from XBOW security researcher Alvaro Muñoz in the clip below. Get more of his thoughts on business logic flaws and how to address them in his new blog: https://bit.ly/4fKEpsP

In a new episode of the Cyberwire podcast, “Vulnerability response. Built for humans, outpaced by machines,” XBOW Head of Security Labs Federico Kirschbaum shares his perspective on vulnerability management when frontier models are finding the flaws. Listen to the episode: https://bit.ly/4epV5ov

What would it take to build an AI-powered offensive security tool? We highlight the cost below. Get full details in our new whitepaper: https://bit.ly/4eqcEDH

AI Tinkerers is hosting an offensive security demo night on June 25 with XBOW. Live exploits, autonomous pentesting, LLM-assisted vulnerability discovery, code walkthroughs, and technical Q&A. No decks. No pitches. Working systems only. RSVP: https://bit.ly/3SdPtVS

Why are design flaws like IDOR so hard to find with automation? XBOW security researcher Alvaro Muñoz explains in the clip below. Get more of his thoughts on business logic flaws and how to address them in his new blog: https://bit.ly/4fKEpsP

If an organization can point a powerful language model at an application and unearth findings, is it effectively running a penetration test? Our new whitepaper breaks down where LLMs are powerful tools for pentesting, and where they need more support: https://bit.ly/4eqcEDH

We're honored that XBOW has been named a winner of Fast Company's 2026 World Changing Ideas Awards in the Business Products & Services category. This recognition reflects the work of our partners & research team, who believe the future of security is autonomous offense. More: https://bit.ly/4epnGca

LLMs excel at following instructions, but not always at identifying which instructions to trust. XBOW Head of AI Albert Ziegler explains why prompt injection risk grows alongside AI agency and enterprise access in IBT Media. Read on: https://bit.ly/3S3pZdO

Samsung SDS announced that it is partnering with XBOW to strengthen its cybersecurity capabilities, using XBOW to uncover hidden vulnerabilities through attack simulations and accelerate identification and remediation with unmatched speed and precision. Get details: https://bit.ly/4oo3zjs

“AI is changing the story of design flaw identification, says XBOW security researcher Alvaro Muñoz in the clip below. Get more of his thoughts on business logic flaws and how to address them in his new blog: https://bit.ly/4fKEpsP

Great spending time with the GuidePoint Security team and customers this week at the GuidePoint Security Golf Classic at Terry Hills. As attack surfaces grow and vulnerabilities multiply, strong partnerships matter. Together, we're helping organizations validate real, exploitable risk.

“Is my application security program built for a world where everyone is a coder?” Read why our CISO, Nico Waisman, believes this question should be top of mind for today’s CISOs in CSO Online: https://bit.ly/4um5upQ

How does AI pentesting work? What should you look for? Get some guidance in our blog post "How to Evaluate an AI Pentesting Vendor: A Decision Framework for Security Leaders." https://bit.ly/4edHyPM

• Why can't traditional pentests keep up with modern attack surfaces? • What stops an autonomous pentesting agent from causing real damage in production? Our CISO answers these questions and more on the Security You Should Know podcast. Listen to the full episode: https://bit.ly/4eiMXWM

Moderna Deputy CISO Farzan Karimi shared how XBOW uncovered attack paths human testers missed, including one that took down a development environment during a trial. This @cyberscoop.bsky.social piece examines what happens when offensive security moves at machine speed: https://bit.ly/4va5Pxr

One theme came up repeatedly at InfoSecurity Europe: ➡️ Security teams want proof, not possibility. Great discussions all week with leaders thinking about autonomous offensive security and operational validation at scale. Thanks to everyone who connected with our team.

On June 10, XBOW CISO Nico Waisman and Moderna Deputy CISO Farzan Karimi will discuss the impact of autonomous, continuous, and exploit-validated offensive security in today’s AI threat landscape. Join us: https://bit.ly/42zUvxV

GPT-5.5 is now part of XBOW. In our testing, GPT-5.5 delivered major gains in vulnerability discovery, exploit reasoning, application interaction, and autonomous testing. Models provide the intelligence. XBOW turns it into autonomous application security. Read more: https://bit.ly/4ufvhAb

Thank you to everyone who joined yesterday's #GartnerSEC session with Farzan Karimi and Troy West of Moderna to learn how they're building an autonomous offensive security program with XBOW! It’s day two, and we’re ready to talk all things autonomous offensive security. Find us at booth 1028!

Today at #Infosec2026, attendees will get a chance to put offensive security to the test during our workshop: Offensive AI in Practice. See firsthand how AI amplifies attackers’ abilities and how offensive security tools find, exploit, validate, and remediate them. Register: https://bit.ly/4d9cd19

Our team is at #Infosec2026 today through Thursday! Stop by booth F-135 to say hi to the team 👋 and learn how your organization can scale offensive security with XBOW. 🏹 https://bit.ly/3P1Vkwj

If you’re at Gartner Security & Risk Management Summit today, find the XBOW team at booth 1028 📍 to learn about autonomous offensive security and how it’s enabling teams to defend against complex and evolving cyberthreats faster, better, and at scale: https://gtnr.it/2Mf36ll #GartnerSEC

Attending Gartner Security & Risk Management Summit? Tune in as Moderna’s Farzan Karimi and Troy West take the stage to share how XBOW enables them to meet the demands of today’s AI-driven cybersecurity landscape. 🔔 TODAY at 02:05 PM EDT: https://gtnr.it/4nQofA6 #GartnerSEC

AI models are getting better at finding vulnerabilities, but detection alone isn’t enough. @cyberscoop.bsky.social covers the early results on Mythos Preview, including XBOW’s evaluation. Read more: https://bit.ly/4e4JqeC

AI models are getting better at finding vulnerabilities, but detection alone isn’t enough. @cyberscoop.bsky.social covers the early results on Mythos Preview, including XBOW’s evaluation. Read more: https://bit.ly/4e4JqeC

On June 16 at 11AM EDT, XBOW Lead Solutions Architect Bill Reyor will break down why security leaders are moving beyond periodic assessments toward continuous offensive security testing. If your exposure changes daily, your testing strategy should too. Register at the link: https://bit.ly/42Nm472

Finding IDORs with automation is hard. Most tools stop at "Can I access this?". XBOW had to answer, "Should I be able to?" Here’s how we did it. https://bit.ly/4fKEpsP

Meet XBOW at the Gartner Security & Risk Management Summit next week at Booth 1028! 📍 Plus, don't miss Moderna’s session where Farzan Karimi and Troy West will discuss how they’re working with XBOW to dramatically increase the speed, scale, and continuity of testing: https://gtnr.it/4nQofA6

The Future of Pen Testing Is Continuous Security Testing Gartner® research on why point-in-time testing can no longer keep pace and what security leaders are doing instead. Download the report now: https://bit.ly/4dpavZF

XBOW's @moyix.net recently joined @grahamcluley.com on the @smashingsecurity.com podcast to discuss: ° Some of the vulnerabilities XBOW has uncovered ° The pros and cons of AI for pentesting ° AI's impact on vulnerability discovery and disclosure ° And more Listen here: https://bit.ly/42SYK7R

In less than two weeks at Infosecurity Europe 2026, XBOW will lead a hands-on workshop: Offensive AI in Practice. 📍 June 2nd, 2pm BST South Gallery Room 18 @ ExCeL London Secure your spot: https://bit.ly/4d9cd19