PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mythos didn't change the rules, it showed us they already changed

ethiack.com | blog | #ai-security | #attack-surface | #offensive-security | #opinion | #project-glasswing | #ethiack
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Ethiack's CTO argues Mythos and Project Glasswing confirm AI-powered offensive security already shifted the rules, with real exposure in obscure vendors and unmaintained legacy integrations.
Published
Collected

Related coverage

blog · xbow.com
Introducing Autonomous Exposure Management: Offensive Security at Enterprise Scale
XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.
blog · ethiack.com
Security Had It Backwards. This Is What Comes Next.
Ethiack's CEO argues the industry over-invested in visibility and finding volume while neglecting proof of exploitability, now the only practical prioritization as exploitation windows collapse.
blog · ethiack.com
AI-Powered Hacking in 2026: What's Real, What's Hype
Ethiack's CEO contrasts practical AI tools that speed up human testers with fully autonomous pentesters, arguing progress lies in orchestration and verification around LLMs, not model intelligence.
blog · ethiack.com
How ANA Aeroportos Kept 10 Airports Secure While Attackers Got Faster
Ethiack case study: ANA Aeroportos, with 10 airports and 60M annual passengers, relies on continuous AI pentesting and human ethical hacking to secure 24/7 IT/OT operations.
blog · ethiack.com
How Smartex Cut Time-to-Mitigation from Weeks to Days
Ethiack case study: textile AI-inspection vendor Smartex replaced slow periodic testing with continuous autonomous pentesting, cutting vulnerability time-to-mitigation from weeks to days.
blog · ethiack.com
How Zick Learn Earned Enterprise Trust Without Hiring an Internal Pentester
Case study: Zick Learn, an AI micro-learning startup, uses Ethiack's continuous testing to answer enterprise security questionnaires with proof, meeting NIS2 expectations without in-house pentesters.
Back