XINT.IO BLOG

This is an overview of the two kernel-level vulnerabilities uncovered by Xint Code in MacOS, iOS and iPadOS which have been patched by Apple

These are the 8 questions that will tell you whether a vendor is selling a pen test alternative, a faster SAST tool, or a demo that doesn’t survive production

There's a difference between insecure code patterns and true vulnerabilities that hackers seek to exploit. Why does that matter?

Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE.

What do buyers actually purchase when they pay for a vulnerability discovery platform, and why is the model the cheapest input in the bill?

In this exclusive report, Xint researchers compare Mythos's publicly disclosed results versus what broadly available models can accomplish using advanced scaffolding

While code is abundant, assurance is scarce. The winners won't be the teams that generate the most code, it’ll be the teams that can prove it's safe.

Linear increases in code are leading to exponential token burn increases. Xint's orchestration brings clear, predictable pricing.

Even secure-looking code can hide dangerous flaws. Learn why business logic vulnerabilities are hard to detect and why most scanners miss them.

Real Vulnerabilities. Actionable Results.

An introduction to DARPA's AI Cyber Challnge and Theori's third place cyber reasoning system

How we learned to build effective LLM agents for hacking at DARPA's AI Cyber Challenge (AIxCC)