Guides pratiques sur le pentesting, la recherche de vulnérabilités et les outils de sécurité à base d’IA.
Les articles sont publiés en anglais et en portugais.
164 articles
Six misalignment reports raise a practical security question: what can an agent actually do? Explore a reusable checklist for permissions, data exposure, memory and independent evidence.
Y Combinator named AI-Native Compliance Infrastructure a Fall 2026 Request for Startups. Why pentesting is the workflow most ready for that shift, how continuous assessment turns SOC 2, ISO 27001 and PCI DSS evidence into a byproduct instead of a project, and what changes when the security loop runs at the speed of deploys.
Two of China's most respected hedge fund managers called the global AI rally a super bubble. Here is why that warning is actually good news for security and what a correction would do to the companies running on narrative versus the ones solving real problems.
OpenAI previewed GPT-5.6 Sol, their most capable model for cybersecurity yet. Exploitation primitives in Chromium and Firefox, U.S. government gating, and why the attacker-defender symmetry means continuous testing is no longer optional.
FulcrumSec claims 1.3 TB stolen from Novo Nordisk, including source code, the exact Ozempic formula and clinical trial data on roughly 11,500 patients. Initial access came from one GitHub token, two months of dwell time, and a lot of lessons every engineering org should take from it.
SpaceX's all-stock acquisition of Anysphere reshapes the software supply chain at a global scale. Known CVEs, prompt injection vectors, developer telemetry risks, and a hardening checklist for every team running Cursor in production.
Three days after launch, the U.S. Commerce Department ordered Anthropic to disable Fable 5 and Mythos 5 worldwide. The jailbreak that triggered it, the export control precedent it set, and what security teams must do now.
A threat actor claims to hold a massive iFood customer database and is demanding payment to suppress it. The pay-or-leak model, why CPF and contact data is dangerous, and concrete steps for businesses and customers.
How attackers use AI across the kill chain, what new risks AI adoption creates, why traditional pentests fall short, and how pentesty.co tests against AI-driven TTPs.