6+ hour, 9+ min ago   (603+ words) Phishing is the primary initial access vector, driving 16% of breaches at an average cost of $4.8 million. Attackers now leverage Generative AI and AiTM kits to easily bypass MFA and traditional Secure Email Gateways. Because users click malicious links in a…...

4+ day, 5+ hour ago   (428+ words) A new open-source project called CyberStrike is positioning itself as the first AI agent built specifically for offensive security, turning any existing Claude, GPT, or LLM subscription into an autonomous red-team operator. Rather than functioning as a simple chatbot wrapper,…...

1+ week, 2+ day ago   (474+ words) Most agentic AI security tools suffer from hallucinated findings, weak context retention, and poor tool integration, but PentesterFlow tackles these problems head-on with built-in pentest skills, evidence-based finding confirmation, and continuous local learning. The tool connects to local or hosted…...

3+ week, 2+ day ago   (356+ words) KittySploit is a new open-source penetration testing framework that combines a Python and Zig codebase with autonomous AI agents, ship­ping with over 1,150 modules for offensive security teams. KittySploit’s core difference is its integration of local large language models via…...

3+ week, 4+ day ago   (400+ words) Xalgorix is an open-source, self-hosted AI penetration testing platform that uses an autonomous LLM agent paired with an independent exploit verifier to deliver proven, not just suspected, vulnerability findings. Most vulnerability scanners flag potential issues and leave security teams to…...

3+ week, 5+ day ago   (521+ words) Threat intelligence feeds have become a staple line item in security budgets. Yet a persistent gap exists between purchasing a feed and actually using it to stop attacks. Many SOC teams receive a steady stream of indicators — IP addresses, domains,…...

1+ mon, 1+ day ago   (265+ words) Local inference is handled through Ollama, which supports both CPU and GPU execution, while cloud-based models can be accessed via API keys. The tool works alongside any CLI-invokable security utility, meaning testers can pair it with existing toolchains like Nmap,…...

1+ mon, 3+ day ago   (413+ words) Torrance, California, USA, July 1st, 2026, CyberNewswire Cyber threat intelligence becomes more valuable when indicators are enriched with context that supports investigation, correlation, and decision-making. Through the Criminal IP integration with OpenCTI, security teams can transform IP addresses, domains, and URLs from…...

1+ mon, 5+ day ago   (711+ words) A new open-source offensive security platform called RedAmon is redefining automated penetration testing by chaining reconnaissance, exploitation, post-exploitation, AI-driven triage, and automated code remediation all into a single end-to-end pipeline that culminates in a GitHub pull request with the fix…...

1+ mon, 2+ week ago   (463+ words) AIRecon is an autonomous penetration testing agent that runs entirely offline, combining a self-hosted Ollama LLM with a Kali Linux Docker sandbox to automate end-to-end security assessments without exposing any data to the cloud. Developed by researcher pikpikcu, it eliminates…...