Blogs

Thoughts, perspectives, and industry commentary from the Cobalt team.

Beyond Annual Pentests: Building Your Offensive Security Program with Cobalt

July 14, 2026
Est Read Time: 2 min
For many organizations, the traditional approach of annual or ad-hoc pentesting simply isn't enough to keep up with...
Product Updates

The State of Pentesting Report: Don’t Miss the Trees for the Forest

July 13, 2026
Est Read Time: 4 min
There’s a common expression that urges “Don’t miss the forest for the trees.” It points to the tendency we humans have...
State of Pentesting

Part 2 — Decoding Windows CBS Manifests: Building the Decoder

July 9, 2026
Est Read Time: 7 min
This is Part 2 of our previous blog post, Decoding Windows CBS Manifests: Reversing the DCM/PA30 Delta Format.
Cobalt Core

The AI Pentesting Pulse: Decoding the 2.7x Risk Multiplier in LLM Deployments

June 25, 2026
Est Read Time: 6 min
Right now, the media and regulators are hyper-focused on frontier models being pulled back by the government for being...
AI Pentesting

Pentester Spotlight — Dogukan Karaciger

June 18, 2026
Est Read Time: 5 min
The Cobalt Pentester Spotlight highlights the fascinating journey of our Core members. Through an interview style, we...
Cobalt Core

Elevating Your Security Posture: Insights from the State of Pentesting Report 2025 and Our New Benchmarking Feature

June 17, 2026
Est Read Time: 2 min
At Cobalt, we're committed to empowering security leaders with the insights they need to make informed decisions and...
Product Updates

We Built a New Role to Solve a Problem AI Just Made Harder to Ignore

June 11, 2026
Est Read Time: 3 min
The penetration testing landscape is changing fast. AI-assisted testing is compressing timelines. Continuous testing...
AI Pentesting

The Verizon DBIR Says Attackers Are Winning. Our Data Shows It's Getting Worse.

June 9, 2026
Est Read Time: 2 min
Each year, the Verizon Data Breach Investigations Report (DBIR) provides a snapshot of how attackers operate. This...
Cybersecurity Insights

Decoding Windows CBS Manifests: Reversing the DCM/PA30 Delta Format

June 8, 2026
Est Read Time: 23 min
Introduction While patch diffing a Windows Latest Cumulative Update (LCU) for vulnerability research, I needed to read...
Cobalt Core
    1 2 3 4 5

    Always get the latest

    Sign up to get Cobalt insights delivered right to your inbox so you never miss a story.

    More resources

    Learn pentesting best practices, read answers to our most common questions
    and get our technical docs.