PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

GPT-5.5 and XBOW: A Step Change in Autonomous Application Security

xbow.com | blog | #ai-security | #agentic-ai | #appsec | #benchmark | #vulnerability-discovery | #gpt-5-5 | #autonomous-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

XBOW announces GPT-5.5 in its platform: it rivals Mythos for vulnerability discovery while cutting missed vulnerabilities 75% versus GPT-5 and 44% versus Opus 4.6 in benchmarks.
Published
Collected

Related coverage

blog · netspi.com
Anthropic’s Mythos Announcement: What it Means for Security Teams
A measured take on Anthropic's Mythos: autonomously chaining four vulnerabilities is a real inflection point, but teams should build their own benchmarks and keep human verification central.
blog · aikido.dev
We burned 11.7bn tokens to find the best cyber AI model
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · netspi.com
Introducing EchoBench: A Human Calibrated Benchmark for Autonomous Pentesting
EchoBench is a human-calibrated benchmark for agentic AI web pentesting; a score of 100 marks parity with associate pentesters across fidelity, difficulty-reach, OWASP breadth, and repeatability.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · xbow.com
Don't Make It Easy for Attackers: 5 Common AppSec Gaps
Discover five common AppSec gaps that give attackers an advantage and learn how better testing, validation, and remediation can reduce exploitable risk.
blog · xbow.com
Grok 4.7 Is Different. So Is the Best Way to Use It.
XBOW tested Grok 4.7 on exploit crafting and agentic pentests: inside xAI's Build it improved substantially over 4.6, outside Build it slipped slightly—orchestration now matters as much as prompts.
Back