Blog

Security Insights

Deep dives, expert analysis, and practical guidance on exposure management, adversarial validation, and the future of AI-driven exposure management.

wp2shell: a critical pre-authentication remote code execution vulnerability in WordPress Core, affecting versions 6.9.0 to 7.0.1.

Exposure ValidationCTEM

wp2shell: A Pre-Authentication RCE in WordPress Core, and Why It Is an Exposure Validation Problem

wp2shell is a pre-authentication RCE in WordPress Core that an anonymous request can trigger on a default install. Here are the affected versions, the patch steps, and why events like this are really an exposure validation problem.

Jul 18, 20269 min

Penetration TestingOffensive Security

Vulnerability Chaining: How Agentic Pentesting Proves Attack Paths

Three low-severity findings can chain into one critical breach. See why CVSS misses chained risk and how agentic pentesting proves or rejects each attack path.

Jul 8, 202618 min

Penetration TestingOffensive Security

What Counts as Valid Proof in an Agentic Pentest?

Valid proof in an agentic pentest is reproducible, in-scope, and attributable evidence of exploitability. What counts, what doesn't, and how to prove it.

Jul 8, 202618 min

The AI vulnerability race is a myth. The constraint on your risk was never discovery speed, it is what happens after the finding.

CTEMExposure Validation

The "vulnerability AI race" is a myth. Here's what actually changes for your exposure program.

The "vulnerability AI race" is vendor theater. What AI actually changes for exposure management, and why validation through exploitation beats discovery speed.

Jun 17, 20267 min

Gartner SRM 2026 summit takeaways on enterprise security by Venu Rao, Strobes CEO

Conferences & EventsThought Leadership

Gartner SRM 2026 Broke Something I Believed About Enterprise Security

Strobes CEO Venu Rao shares his takeaways from Gartner Security & Risk Management Summit 2026: everyone can find vulnerabilities, almost no one has cracked fixing them.

Jun 9, 20267 min

Data BreachesSupply Chain Security

Top 8 Data Breaches of May 2026

The 8 confirmed data breaches of May 2026, from the 275M-record Canvas LMS breach to GitHub's VS Code supply chain attack, and how to defend against each pattern.

Jun 3, 202622 min

What Is Agentic Pentesting - Complete Guide for Security Teams 2026

Penetration TestingOffensive Security

What Is Agentic Pentesting? The Complete Guide for Security Teams (2026)

Agentic pentesting uses specialized AI agents to test your entire attack surface in hours, not weeks. Here is how it works, what surfaces it covers, how safety is enforced, and how to evaluate platforms with real benchmarks.

May 28, 202619 min

Data BreachesCybersecurity

Top 10 Data Breaches of April 2026

The biggest data breaches of April 2026 ranked and analyzed, from Checkmarx supply chain poisoning to Salesforce misconfigurations and ransomware hitting two major US banks.

May 1, 202615 min

Best AI Pentesting Tools in 2026 - Ranked Priced and Compared

Penetration TestingCTEM

Best AI Pentesting Tools in 2026: Ranked, Priced & Compared (12 Tools)

Which AI pentesting tool actually reduces risk in 2026? We reviewed 12 platforms on autonomy, proof quality, pricing, and what happens after a vulnerability is found.

Apr 9, 202630 min

CTEMPenetration Testing

Is Claude Mythos the End of Pentesting?

Claude Mythos found thousands of zero-days in Linux, browsers, and Apache. Does that make pentesting platforms obsolete? Understanding why models, harnesses, and platforms are three different things -- and why smarter AI makes Strobes more valuable, not less.

Apr 8, 202615 min

Strobes VI Supply Chain Attacks Ransomware Groups Threat Actors - Featured Image

Product UpdatesVulnerability Intelligence

Strobes VI Now Tracks Supply Chain Attacks, Ransomware Groups, and Threat Actors

224,487 supply chain incidents. 1,251 threat actors. Ransomware groups tracked in real time. Strobes VI now provides the threat intelligence layer that powers proactive exposure management, starting with the lessons from the Axios npm compromise.

Apr 3, 202611 min

How Strobes AI Turns a Supply Chain Zero-Day into Full Exposure Assessment

CTEMCybersecurity

How Strobes AI Turns a Supply Chain Zero-Day into a Full Exposure Assessment in Under 30 Minutes

When the axios npm package was compromised on March 31, 2026, Strobes AI agents autonomously performed incident response, identified every exposed repository across the attack surface, and generated a complete exposure assessment with remediation tasks in under 30 minutes.

Mar 31, 202610 min