The Harness Is the Hard Part of Agentic Pentesting
The Hacker NewsOct 21, 2026AI Penetration Testing / Web Security An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little…
The Hacker NewsOct 21, 2026AI Penetration Testing / Web Security An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little…
If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack…
Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR 2026). A new free guide…
A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization’s private repositories, researchers at Noma Security have shown. The attacker needs only to open a…
The Hacker NewsJun 24, 2026Network Security / Vulnerability Management We are standing at the end of an era we never thought to mourn: the era of human-speed threats. For years,…
The Hacker NewsJun 04, 2026Artificial Intelligence / Defense Technology Over the past several weeks, the cybersecurity community has been reminded how quickly frontier and agentic AI in defense networks can…
Agentic AI is already running in production environments across many organizations today. It is executing tasks, consuming data, and taking actions — most likely without meaningful involvement from the security…
If you run security at any reasonably complex organization, your validation stack probably looks something like this: a BAS tool in one corner. A pentest engagement, or maybe an automated…
The Hacker NewsMar 10, 2026Artificial Intelligence / Threat Detection Artificial Intelligence (AI) is no longer just a tool we talk to; it is a tool that does things for us.…