Research

AI's Biggest Security Risks Are Increasingly Familiar Flaws

November 2, 2026
Est Read Time: 24 min
When security teams talk about AI risk, the conversation usually starts with prompt injection, jailbreaks, and...
Artificial Intelligence Research

Top 10 Spookiest Web App Vulnerabilities

October 30, 2026
Est Read Time: 6 min
Vulnerabilities don’t need hockey masks or dirty jackets to frighten people. Whether AppSec knows they exist or not,...
Research

The Patch Is the Starting Gun: PHP2Shell and the AI Race to a PoC

October 27, 2026
Est Read Time: 5 min
PHP2Shell is two critical remote code execution flaws in PHP (CVE-2026-109618 and CVE-2026-109619). The patches shipped...
Artificial Intelligence Research

Dissecting the ax-llm CVEs: Why Edge AI Memory and Execution Boundaries Matter

October 20, 2026
Est Read Time: 48 min
When the security community talks about AI security, the conversation almost always lands on prompt injection,...
Research

State of Pentesting in Financial Services and Insurance Industries

August 18, 2026
Est Read Time: 14 min
The financial services and insurance industries are disciplined when it comes to pentesting, with one blind spot. While...
Industry Insights Research

State of Pentesting in the Healthcare Industry

August 18, 2026
Est Read Time: 15 min
The healthcare industry closes high-risk findings faster than almost any sector, by one measure, but security teams in...
Industry Insights Research

State of Pentesting in the Software Industry

July 30, 2026
Est Read Time: 17 min
Software companies are the strongest remediators with the fastest resolution time of high-risk vulnerabilities of any...
Industry Insights Research

The State of Pentesting Report: Don’t Miss the Trees for the Forest

July 13, 2026
Est Read Time: 4 min
There’s a common expression that urges “Don’t miss the forest for the trees.” It points to the tendency we humans have...
Research

How to Get Top-Right of the Offensive Security Leaders Quadrant

May 27, 2026
Est Read Time: 4 min
When we set out to analyze five years of pentesting data for the 2026 State of Pentesting Report—drawing on more than...
Thought Leadership Research