Jeffrey Martin - Xint

Jeffrey Martin

The Side Door Problem

The Side Door Problem

Attackers and defenders alike focused on core systems. The next set of impactful breaches will come from the side doors.

Google stopped paying for tails

Google stopped paying for tails

Reports are commoditized. What actually matters for bug discovery is validation and remediation.

NewsOpen Source Projects

Any Android App Can Shut Down the Phone - We Found It in Three Hours Without Source Code

Any Android App Can Shut Down the Phone - We Found It in Three Hours Without Source Code

Any app on your Pixel can turn the phone off. We found it in a driver binary, and the part that should bother you is how long it took.

Vulnerability ResearchOpen Source ProjectsAI for Security

Everyone Can Find Vulnerabilities Now. Here Is How To Tell Them Apart.

Everyone Can Find Vulnerabilities Now. Here Is How To Tell Them Apart.

Winning at benchmark leaderboards is not the same as securing your applications in the real world. This is how to tell the difference.

FedRAMP Just Retired the Flat Scan. The New Rules Ask for Proof of Exploitability.

FedRAMP Just Retired the Flat Scan. The New Rules Ask for Proof of Exploitability.

Findings are not enough: Vulnerability Detection & Response and Vulnerability Evaluation & Reporting are now required to obtain or maintain FedRAMP Certification

NewsAI for Security

Vulnerabilities vs. Weaknesses: Why the Distinction Matters

Vulnerabilities vs. Weaknesses: Why the Distinction Matters

There's a difference between insecure code patterns and true vulnerabilities that hackers seek to exploit. Why does that matter?

Vulnerability ResearchAI for SecurityProduct

System, Not Model: Why Off-the-Shelf LLMs Don’t Replace a Pen Test

System, Not Model: Why Off-the-Shelf LLMs Don’t Replace a Pen Test

What do buyers actually purchase when they pay for a vulnerability discovery platform, and why is the model the cheapest input in the bill?

Vulnerability ResearchAI for Security