Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The hidden cost of agentic pentesting

bugcrowd.com | blog | #ai-security | #bug-bounty | #pentesting | #agentic-ai | #vulnerability-disclosure | #triage

Summary

Bugcrowd finds agentic pentesting tools submit overwhelmingly low-signal reports on public bug bounty programs, while top findings still come from skilled humans; triage absorbs the hidden cost.
Published
Collected

original ↗

Related coverage

  1. What’s changed in AI security over the past two years (bugcrowd.com)
  2. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  3. ‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty (yeswehack.com)
  4. A Payment Platform for Security Researchers—No Bug Bounty Program Required (hackenproof.com)
  5. Jason Haddix: Stop fearing AI pentesting (aikido.dev)
  6. PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting (crowdstrike.com)

back