penetration testing

4 stories

Stories

A Mere Mortal's Introduction to JIT Vulnerabilities in JavaScript Engines
An accessible introduction to Just-in-Time compilation vulnerabilities in JavaScript engines and their relevance to browser security.
LobstersOct 4, 202635 min read
How Astra Security Combines Generative Reasoning with Expert Validation
Every security vendor’s homepage now says “AI-powered” somewhere above the fold, and most are describing the same scanners they sold in 2022 with a model bolted onto the reporting layer. Buyers have noticed, and the skepticism is earned.
Astra Security BlogSep 24, 20268 min read
Autonomous Pentesting Is About To Kill Security Abbreviations
TL;DR: what autonomous pentesting is going to absorb I have watched the security industry run a very profitable game with abbreviations for the last decade. The simple way to do it is to invent a category, give it a cool catchy abbreviation, market it as the missing piece of the stack, and repeat.
Astra Security BlogSep 21, 20263 min read
Can Autonomous Pentesting Rescue CVE Coverage From Vanity Metric Hell?
The security industry killed CVE coverage as a credible metric, and it deserved to die. Vendors inflated the numbers for years in the name of depth, and nobody in the room had an incentive to ask whether they reflected real validated risk or just a longer signature list.
Astra Security BlogSep 21, 20264 min read