Artificial Intelligence Research

The Patch Is the Starting Gun: PHP2Shell and the AI Race to a PoC

PHP2Shell is two critical remote code execution flaws in PHP (CVE-2026-109618 and CVE-2026-109619). The patches shipped...

Cobalt + Wiz: Bringing Real-World Offensive Security Into Your Cloud Risk Workflow

November 5, 2026
Est Read Time: 1 min
Cloud security platforms are great at telling you what's exposed. They're not built to tell you what an attacker could...
NEWS

AI's Biggest Security Risks Are Increasingly Familiar Flaws

November 2, 2026
Est Read Time: 24 min
When security teams talk about AI risk, the conversation usually starts with prompt injection, jailbreaks, and...
Artificial Intelligence Research

Supabase From a Pentester's Perspective: Methodology and Where the Real Risks Hide

October 30, 2026
Est Read Time: 11 min
Methodology and where the real risks hide.
Cobalt Core

Top 10 Spookiest Web App Vulnerabilities

October 30, 2026
Est Read Time: 6 min
Vulnerabilities don’t need hockey masks or dirty jackets to frighten people. Whether AppSec knows they exist or not,...
Research

Pentester Spotlight—Prateek Thakare

October 28, 2026
Est Read Time: 5 min
The Cobalt Pentester Spotlight highlights the fascinating journey of our Core members. Through an interview style, we...
Cobalt Core

The Patch Is the Starting Gun: PHP2Shell and the AI Race to a PoC

October 27, 2026
Est Read Time: 5 min
PHP2Shell is two critical remote code execution flaws in PHP (CVE-2026-109618 and CVE-2026-109619). The patches shipped...
Artificial Intelligence Research

Why One AI Pentest Run Isn't Enough

October 23, 2026
Est Read Time: 7 min
Today's powerful AI and large language model services are non-deterministic. An identical input into the same AI system...
Thought Leadership Artificial Intelligence

Dissecting the ax-llm CVEs: Why Edge AI Memory and Execution Boundaries Matter

October 20, 2026
Est Read Time: 48 min
When the security community talks about AI security, the conversation almost always lands on prompt injection,...
Research

The Token Tax: Why AI Pentesting Gets Expensive Fast

October 16, 2026
Est Read Time: 4 min
Given unlimited access to advanced AI models, unlimited time, and an unlimited budget to pay for the tokens those...
Thought Leadership Artificial Intelligence
    1 2 3 4 5

    Always get the latest

    Sign up to get Cobalt insights delivered right to your inbox so you never miss a story.

    More resources

    Learn pentesting best practices, read answers to our most common questions
    and get our technical docs.