In this exclusive report, Xint researchers compare Mythos's publicly disclosed results versus what broadly available models can accomplish using advanced scaffolding
A critical CPython CVE today took less than 45 minutes of human work to find, triage, and fix because of Xint Code
While code is abundant, assurance is scarce. The winners won't be the teams that generate the most code, it’ll be the teams that can prove it's safe.
Linear increases in code are leading to exponential token burn increases. Xint's orchestration brings clear, predictable pricing.
Even secure-looking code can hide dangerous flaws. Learn why business logic vulnerabilities are hard to detect and why most scanners miss them.
Real Vulnerabilities. Actionable Results.
How we learned to build effective LLM agents for hacking at DARPA's AI Cyber Challenge (AIxCC)
An introduction to DARPA's AI Cyber Challnge and Theori's third place cyber reasoning system
Agent trajectory walkthroughs of a fully autonomous hacking system
Learn how to spot phishing scams with expert tips recognizing suspicious emails, SMS, and fraudulent request for personal information.
In this article, we briefly look at the circumstances of the Bybit incident and discuss what countermeasures could have been implemented. Then, we discuss the limitations of current solutions and how…
A new approach to the Overwriting modprobe_path technique is introduced, addressing changes in the Upstream kernel that prevent triggering via dummy files.
Discover the top cybersecurity threats for 2025 and how Theori's innovative solutions can safeguard your business from evolving cyber risks and costly data breaches.
This post examines DeepSeek's security gaps, privacy practices, and open-source AI risks, offering practical advice for users and developers.
Security silos occur when different security tools, teams, or systems operate in isolation, unable to effectively share data or communicate.
QueryX, Theori’s program analysis platform, automates variant analysis for vulnerability detection. Learn how its taint analysis module uncovered CVE-2023-39471.
Dive into five significant security risks that emerged as unintended consequences of new feature development.
So you know what ASM is and why you need it — but which features are crucial? Here’s the run down.
How LLMs are changing the game for static analysis — especially when source code is available.
Applications of larage language models in offensive security
Theori’s Cyber Reasoning System (CRS) “Robo Duck” not only cleared the bar to get us $2M and a spot at the AIxCC finals in 2025, it also got the first place among all the submissions in the highly com…
The top 7penetration testing tools of 2024 for hackers and for businesses.
CVE-2024-27394 is a TCP-AO Use-After-Free vulnerability caused by improper RCU API usage. Read the in-depth analysis and reliable triggering technique.
Explore how offensive and defensive security strategies work together to protect against cyber threats.
Four critical RCE vulnerabilities (CVE-2024-36072 to CVE-2024-36075) in CoSoSys Endpoint Protector were identified, allowing full server and client compromise. Read the full analysis.
The final part of the N-day exploit series analyzes CVE-2023-36802, a privilege escalation vulnerability in mskssrv.sys, used to gain SYSTEM access on a VMware host.
CVE-2023-20869 was exploited to achieve arbitrary code execution on a VMware host from a guest system. Read the full technical analysis.
CVE-2023-34044, a variant of CVE-2023-20870, was exploited to extract critical information from a VMware host process. Read the in-depth analysis.
CVE-2023-29360, a logic bug in the mskssrv.sys driver, was exploited to escalate privileges to SYSTEM in a 1-day full chain attack. Read the detailed breakdown.
CVE-2023-21674, a Windows kernel UAF vulnerability, was used to escape the Chrome sandbox in a 1-day full chain exploit. Read the detailed analysis.
