Joe Brinkley

Joe Brinkley, also known in the community as BlindHacker, serves as the Director of Offensive Security Research & Community at Cobalt. Bringing over 20 years of "in the trenches" experience to the offensive security space, Joe’s career began in 2005 with a decade as a high-level government consultant before he transitioned into commercial penetration testing in 2016. He joined Cobalt in late 2025, drawn by a mission to evolve traditional Pentesting into a more dynamic, community-driven research model. When he isn't obsessing over cybersecurity, you’ll likely find him tinkering in his home lab or perfecting a smoked brisket.

The Patch Is the Starting Gun: PHP2Shell and the AI Race to a PoC

October 27, 2026
Est Read Time: 5 min
PHP2Shell is two critical remote code execution flaws in PHP (CVE-2026-109618 and CVE-2026-109619). The patches shipped...
Artificial Intelligence Research

Dissecting the ax-llm CVEs: Why Edge AI Memory and Execution Boundaries Matter

October 20, 2026
Est Read Time: 48 min
When the security community talks about AI security, the conversation almost always lands on prompt injection,...
Research

The AI Pentesting Pulse: Decoding the 2.7x Risk Multiplier in LLM Deployments

June 25, 2026
Est Read Time: 6 min
Right now, the media and regulators are hyper-focused on frontier models being pulled back by the government for being...
Artificial Intelligence

New Cobalt Research: Navigating 2026’s Nation-State and Supply Chain Threats

April 21, 2026
Est Read Time: 3 min
We are currently operating in a global geopolitical powder keg. As regional conflicts fundamentally redraw the cyber...
Research

Moving from Annual VAPT to CTEM (Continuous Threat Exposure Management)

March 25, 2026
Est Read Time: 6 min
The accelerating speed of AI-powered cyberattacks has made traditional vulnerability assessment and penetration testing...
Thought Leadership

The Iranian Cyber Playbook: What Security Teams Should Expect

March 17, 2026
Est Read Time: 6 min
It’s a common misconception that geopolitical crises stay confined to the physical battlefields. If all of the action...
Thought Leadership

Why the World’s Best Pentesters Are Trading the Gig for the Blueprint

March 5, 2026
Est Read Time: 3 min
If you asked me twenty years ago what a pentester looked like, I’d probably describe someone like myself back then: the...
Thought Leadership

CTEM: Solving CVE Shadow IT and SaaS Security Gaps

February 6, 2026
Est Read Time: 4 min
SaaS has introduced vulnerabilities that conventional CVE scans can’t catch. Third-party dependencies can contain...
Thought Leadership