[CVE-2025-7775] Desktop AI Supercomputers and Automated Cyberattacks

Bishop Fox details an unauthenticated out-of-bounds memory read in Citrix NetScaler ADC and Gateway (CVE-2023-6549) that can leak prior POST request bodies; patched releases listed per CTX584986.

Barrett Darnell recounts how Bishop Fox's CAST team triaged Citrix's 11-CVE wave, de-escalating the CVE-2020-8193 authentication bypass after confirming clients were not exposed.

XBOW tests your whole external application estate the way an attacker would, with no source code and no credentials, and proves what is exploitable.

A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.

Bugcrowd's Savant Forge combines fuzz testing with symbolic execution to surface real exploitable vulnerabilities in CI/CD pipelines, while Savant Runtime tracks live third-party components in production to support SBOM compliance.

YesWeHack examines three key AI pentesting concerns - scope control, harm avoidance, and traceability - and shows how its Agentic Pentest harness addresses them for safe autonomous testing.