Blog
Act III: The Reframe
Scene 1 (The Question I Should Have Asked) The ROI question changed everything. Instead of trying to prove business logic vulnerabilities were exploited at scale, literally a question the data couldn't answer, I could analyze what different vulnerabilities cost to...
Act II: The Search (Scene 4 & 5)
Scene 4 (The Gap) But even if fraud and breach statistics were combined into one comprehensive database, I'd still have a problem. Most cybercrime never gets reported at all. The Department of Justice estimates that only 1 in 7 cybercrimes are reported; meaning...
Act II: The Search
Scene 1 (The Investigation Begins) OK. I'm irreplaceable. But how do I prove that, objectively? After playing with ChatGPT in our little experiment, I'd been in a downward spiral. LLMs could automate vulnerability scanning, that much was clear. XBOW was finding SQLi,...
The Pentester’s Guide to AI Disruption: A 6-Part Series
Week 1: March 3 - Act I (The Crisis) March 5 - Act II, Scenes 1-3 (The Search Begins) Week 2: March 10 - Act II, Scenes 4-5 (The Gap and Realization) March 12 - Act III (The Reframe) Week 3: March 17 - Act IV, Scene 1 (The Method) March 19 - Act IV, Scene 2-3 (The...
Act I: The Crisis
Scene 1 (The Introduction) My first introduction to XBOW was a LinkedIn notification in late 2024. We're hiring at XBOW! We're on a mission to redefine offensive security through AI. The email was a LinkedIn summary. A repost from Nico Waisman. The "use after free"...