---
id: 5187
title: "We Ran 1,060 Autonomous Attacks. Here's What the Industry Gets Wrong."
source_domain: xbow.com
source_url: "https://xbow.com/blog/we-ran-1060-autonomous-attacks"
published_at: "2026-03-02T13:00:00Z"
tags: ["ai-security", "vulnerability-research", "ai-safety", "benchmark", "llm", "hackerone", "autonomous-attacks"]
phying_url: "https://phying.com/item/5187"
lang: en
---

# We Ran 1,060 Autonomous Attacks. Here's What the Industry Gets Wrong.

## Summary

Counters the 2026 International AI Safety Report's claim that autonomous attacks aren't feasible yet, citing XBOW's record: 1,060 HackerOne vulns, 48-step chains, a 40-hour job in 28 minutes.

## Intelligence Metadata

- **Sources:** xbow.com
- **Published:** 2026-03-02T13:00:00Z
- **Original:** https://xbow.com/blog/we-ran-1060-autonomous-attacks
- **Phying News:** https://phying.com/item/5187