0sec Labs open-sources 0, an AI security harness
The MIT or Apache-2.0 research preview uses a bring-your-own model and self-reports 93 of 95 XBOW solves.
Stories per day · 30 days
3 RSS
Relatednodezero5attack-path2automation2horizon32remediation2torq2vulnerability-management22fa1activemq1agentic-frameworks1agentic-testing1ai-agent1ai-pentesting1ai-security1ai-tool1appsec1art-ex1artex-ai1
31 stories, newest first · one card per story
Stories tagged #pentesting
PortSwigger releases Burp AT for enterprise agentic pentests
Teams set scope and autonomy in advance, and Burp enforces those limits rather than the model.
1
WorkOS data breach via ARTEX AI framework
Attacker used ARTEX AI to access business contacts and customer communications summaries.
Threat Actors Abuse Agentic Frameworks ARTEX and CAIRN for Automated Intrusions
Mandiant and GTIG observe ARTEX, Hexstrike, and CAIRN used by threat actors in live incidents since August 2026, enabling rapid lateral movement and exfiltration.
2
Horizon3 says old vulnerability habits still undermine CTEM
Customer retests cut demonstrated compromise to zero while dozens of minor findings remained.
1
Horizon3 sends NodeZero findings into Palo Alto Cortex XSOAR
High and critical findings become XSOAR incidents, and 1-Click Verify retests whether a fix is still exploitable.
1
Finance firms found attack paths after expanding NodeZero testing
Horizon3 case studies say a Dev environment reached production Domain Admin and one credential exposed about 300,000 files.
1
SOCRadar promotes a buyer's checklist for AI pentesting tools
The captured page is site navigation and product marketing; the 30 questions themselves are not included.
1
From Proven Attack Paths to Verified Fixes: Horizon3 and Torq Close the Remediation Loop
Horizon3 and Torq connect NodeZero attack-path proof to automated remediation and retesting.
Is AI pentesting as good as a human pentester?
An Intruder engineer argues AI pentesting finds complex bugs that checklist-driven human tests miss.
1
12 Best Bug Bounty Platforms Compared (2026): Features & Pricing
A 2026 comparison ranks twelve bug bounty platforms, with HackerOne, Bugcrowd, Intigriti, and Synack leading.
10
Integrate to Remediate Proven Attack Paths and Verify Every Fix Automatically
Horizon3 and Torq brief links NodeZero attack-path findings to automated remediation and retesting.
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
Reflectiz says its AI pentest agent found a critical OTP bypass on a major insurer's website.
3
A Practical Guide to “Plug&Pwn” for Pentesters and Defenders
A practical guide shows how USB Plug and Play can give SYSTEM on locked Windows machines.
9
Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform
Hadrian raised $40 million in Series B funding to expand its autonomous AI offensive security platform.
What Is Agentic Pentesting? What It Proves, and Where It Stops.
Picus says agentic pentesting proves exploit chains but misses speed and most of the estate.
3
Horizon3 + CrowdStrike: Prove. Prioritize. Verify.
Horizon3 and CrowdStrike connect NodeZero exploitability proof to Falcon SIEM and Fusion SOAR.
3
Trading Maintenance for Momentum: Scaling Security Validation Across 230+ Sites
An automotive manufacturer adopted Horizon3 NodeZero to validate security across more than 230 sites.
Aikido Security Releases Altar-1: An Open-Weight Security Model Pruned From GLM-5.3 to 328 GB
Aikido released Altar-1, an open-weight security model pruned from GLM-5.3 to 328 GB.
Rouxii: Exploiting Honeypots with Deception-Aware AI Pentesters
Rouxii finds deception-aware LLM pentesters identify honeypots far more often and can abuse them.
Aikido Security Unveils Altar-1 Open-Weight AI for Cybersecurity Defense
Aikido released Altar-1, an open-weight defensive model pruned from GLM-5.3 for on-premises security testing.
How Kyocera AVX Built a Global Security Validation Program from Zero
Horizon3.ai customer story: Kyocera AVX used NodeZero to build a global security validation program, remediating over 30,000 vulnerabilities across 33 manufacturing sites.
2
How Pentest Companies Adapt In The Era of AI
Opinion piece urges pentest firms to adopt self-hosted AI like Qwen3-Coder via Ollama, warning client findings pasted into cloud models breach confidentiality.
7
CISO's Expert Guide to Agentic Pentesting for Websites
A new free guide urges CISOs to adopt autonomous AI agents for continuous website pentesting as attackers weaponize vulnerabilities in about five days.
2