Searchlight Cyber researcher Adam Kues spent $25 of GPT-5.6 Sol Ultra tokens and 10 hours of multi-agent analysis to discover CVE-2026-63030 ('wp2shell'), a pre-authentication SQLi-to-RCE chain in Wor…
Exploit brokers are paying up to $500,000 for WordPress remote code execution vulnerabilities, but a researcher using OpenAI's GPT5.6 Sol Ultra model and a $25 budget discovered a critical chain. The …
A security researcher using Hacktron's pentest tool discovered that PostHog launched Playwright Chromium with `--no-sandbox` for heatmap screenshots, then used Anthropic's Claude to write an exploit f…
Open-weight models GLM and DeepSeek are closing the gap with frontier models at finding software vulnerabilities, according to a benchmark by cybersecurity firm Hacktron. Testing eight models on 15 re…
Hacktron researchers discovered critical vulnerabilities in Metabase Cloud that could have allowed attackers to compromise all cloud tenants. By exploiting flaws in H2 database connection handling and…
The Free Software Foundation announced that security researchers from Hacktron reported vulnerabilities in GNU Savannah in early May, which have since been patched. No evidence of sensitive data compr…