PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

An open-weight model powered the #1 HackerOne VDP research operation

tenzai.com | blog | #ai-security | #bug-bounty | #vdp | #hackerone | #ai-agent | #open-weight-model
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Tenzai's AI hacker topped the world's largest bug bounty leaderboard on GLM 5.2, a model anyone can download, and the offensive capability once limited to a few frontier labs is now within anyone's reach.
Published
Collected

Related coverage

blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · tenzai.com
Interactive Testing: Lead a Team of AI Hackers with Tenzai
# Interactive Testing: Lead a Team of AI Hackers with Tenzai Daniel Schwartzman Senior Product Manager Share While Tenzai has the ability to run autonomously, what happens when the human security...
blog · blog.trailofbits.com
Your AI agent fixed the bug, but what else did it change?
We’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate patch development and regression checks to agents.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · xbow.com
A Vulnerability Is a Hypothesis. An Exploit Is the Proof.
Every security team runs on one scarce resource: the attention of those who can fix things. Only an exploitable bug is worth interrupting an engineer for.
Back