XBOW retweeted
For $50, anyone can rent a frontier AI model and start attacking a company. @Emerj talks with Sridhar Boddula, Head of Security Platform Eng. at @MassMutual, on #AIinBusiness. Sponsored by @XBOW zurl.co/ARbYO
XBOW retweeted
The danger of HTTP2Shell is very real. The libbrotli 🥦vulnerability affects a wide range of software, patch now (CVE-2026-111497)
We've achieved unauth RCE in Docker's official WordPress image abusing the well known /xmlrpc.php endpoint, we call it the pingback of hell :)
XBOW retweeted
- por qué tantas vulnerabilidades esta semana?
- pocos tuvieron acceso a mythos. en que es bueno y en que no?
- las noticias de agents hackeando: es marketing o real?
@fede_k de @Xbow te cuenta esto y mas en @radarlat, con @mgonto y @DAarambillet
youtube.com/watch?v=qcUY5GnW…
XBOW retweeted
The 4th annual Cyber 60 list is here.
This year’s list recognizes some of the fastest-growing venture-backed cybersecurity startups in the market, building to advance next-gen infrastructure, AI security, and how we approach threat detection.
Congratulations to everyone who made the #Cyber60 list in partnership with @FortuneMagazine and sponsor @AWSstartups.
Read our full CISO survey report, conducted with Wakefield Research, which polled 200 CISOs on enterprise AI and where they’ll invest next: lsvp.com/cyber60-2026-2027/
XBOW retweeted
Crashing the Crashpad talk is fascinating. I simply study further about the flow and details, this is quite fun and decent, making the object alive by uploading 512MB object slowly. Thank you so much.
@Xbow
@offensive_con
2/ XBOW has rolled PHP2Shell validation into new assessments, safely testing whether the vulnerability can actually be exploited and providing a full trace of what was attempted. If something is exploitable, you get the proof.
Read more on what happened, what defenders need to know, and how to validate real exposure: xbow.com/blog/php2shell-patc…
XBOW retweeted
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) has caused a state of panic across the internet.
@Xbow has built the capability to identify vulnerable PHP versions and, where they are genuinely exploitable, demonstrate real code execution, proof, not theory.
Our offensive research team continues to expand coverage across common PHP versions and configurations.
But coverage is only part of the story: because no two targets are identical, our agents do not rely on a fixed list of known-good targets.
When they encounter a build or configuration they have not seen before, they can analyze it, work out the target-specific parameters a working exploit requires, and adapt the technique to that instance, in effect building the exploit for that target rather than replaying a canned one.
That means XBOW can validate real impact even on PHP instances that off-the-shelf tooling would simply mark "possibly vulnerable" and move on.
For immediate support, get in touch with our team below.
XBOW retweeted
DataTribe / Virtu Cyber Innovation Conference 2026 - DMV Rising - DataTribe Challenge kicked off with "Autonomous Offense: AI, Agentic Pen Testing, and the Race to Patch Faster" #Keynote by Nico Waisman (XBOW) #CIC2026 @DataTribe @Xbow @virtruprivacy
