Woori Financial Group has become the first Korean financial enterprise to deploy Xint's AI-based black box penetration testing solution, Xint Web, to establish a continuous security inspection system …
Wiz, Microsoft, Bugcrowd, Nebula Security, and Aikido all announced AI systems that find real software vulnerabilities, but benchmarks like CyberGym measure known-bug reproduction, not real-world disc…
Xint, a cybersecurity company, reports that compound annual growth in CVEs quadrupled to 20% in the five years since ChatGPT's public launch, compared to 4% from 2017-2021, with Chrome CVE issuance in…
Xint Research analyzed 28 AI-generated codebases and found that the most common vulnerabilities include injection flaws, broken access control, and cryptographic issues, with AI code being inherently …
Theori's Xint platform safely scanned over 2,500 live domains without disruption using autonomous AI agents for penetration testing, implementing a two-layer safety architecture that includes operatio…
AI-augmented attackers are probing every corner of applications with inexhaustible persistence, forcing defenders to adopt AI-driven security tools, but many vendors mislabel legacy systems as "AI." L…
Xint, an AI-powered penetration testing tool, discovered an insecure direct object reference (IDOR) vulnerability in a healthcare client's system that exposed patients' protected health information. T…
Xint's AI-powered application security testing tool produces results that vary between scans of the same target, with core exploitable vulnerabilities recurring consistently across approximately 60-70…
Xint, an AI-powered autonomous pentesting platform, is not designed to replace human security engineers but to act as a a force multiplier by automating code analysis and vulnerability discovery. The …
"Copy Fail," a dangerous Linux local-privilege escalation vulnerability that exploits a kernel memory corruption flaw to provide a controlled 4-byte write into the Linux page cache. This allows attack…
Xint, an LLM-based security tool developed by Theori, reports a false positive rate of less than 25% for its highest-severity vulnerability findings, based on manual validation through proof-of-concep…
On May 11, 2026, Apple released security updates for iOS, iPadOS, and macOS to patch two kernel-level vulnerabilities (CVE-2026-28972 and CVE-2026-28986) discovered by Xint researchers. The first flaw…
Zero data retention (ZDR) policies are essential for teams using large language models (LLMs), as default provider practices often log prompts and outputs for extended periods, creating security and c…
Critical evaluation framework for purchasing AI-powered penetration testing tools, warning that the market is fragmented and that vendors often use the same terms to describe different capabilities. I…
The article distinguishes between a "weakness" (a theoretical code pattern that could cause issues) and a "vulnerability" (a specific, exploitable flaw in a live system). It argues that the security i…
DARPA's post-AIxCC bounty program led Xint.io to discover CVE-2026-31789, a critical heap buffer overflow vulnerability in OpenSSL that could enable code execution. Xint's AI-powered scan analyzed ove…
"Copy Fail" (CVE-2026-31431), a logic bug in the Linux kernel's authencesn cryptographic template that allows an unprivileged local user to execute a deterministic 4-byte write into the page cache of …
Off-the-shelf large language models (LLMs) cannot replace professional penetration testing because the model is only one small component of the overall security assessment process. While current LLMs …
Theori, a cybersecurity company led by CEO Brian Pak, announced that its AI hacker solution, Xint, has been adopted by Samsung Electronics to automate security for large-scale IT assets. Xint autonomo…
Focusing solely on frontier AI models for cybersecurity is misguided, as "good enough" reasoning combined with effective scaffolding is more important. It highlights that Xint's autonomous AI auditor …