https://xint.io/blog Welcome to the Xint blog! Thu, 16 Apr 2026 20:44:39 GMT inblog Mon, 06 Jul 2026 20:36:43 GMT https://image.inblog.dev?url=https%3A%2F%2Finblog.ai%2Fapi%2Fog-logo%3FlogoUrl%3Dhttps%253A%252F%252Fsource.inblog.dev%252Flogo%252F2026-04-21T20%253A39%253A21.712Z-fe202dd0-0a7f-41d2-a9bd-88052b6a6250%26title%3D%26description%3DWelcome%2520to%2520the%2520Xint%2520blog! https://xint.io/blog https://xint.io/blog/safe-autonomous-ai-agents-pentesting Autonomous AI security tools can cause as much damage as they prevent if harnessed incorrectly. This is how Xint delivers best-in-class results without compromising security. Tue, 07 Jul 2026 14:33:13 GMT https://xint.io/blog/safe-autonomous-ai-agents-pentesting AI for SecurityFAQProduct Xint https://xint.io/blog/fintech-secure-rapid-product-iteration For startups where speed is of the essence, when and how should security checks are performed can either be an accelerant or a bottleneck Wed, 24 Jun 2026 23:38:43 GMT https://xint.io/blog/fintech-secure-rapid-product-iteration NewsCase Study Xint https://xint.io/blog/xint-dual-iso-security-certifications Xint achieves the world's leading standard for information security management, evaluating an organization's security policies, risk management practices, access controls, and incident response procedures. Tue, 23 Jun 2026 14:54:06 GMT https://xint.io/blog/xint-dual-iso-security-certifications ProductAI for SecurityNews Hector Leano https://xint.io/blog/incremental-model-improvements-higher-cost-worth-it What are the incremental benefits to each new (more expensive) model and when does it make sense to update? Tue, 16 Jun 2026 13:38:18 GMT https://xint.io/blog/incremental-model-improvements-higher-cost-worth-it AI for SecurityProductFAQ Hector Leano https://xint.io/blog/ai-wrapper-vs-ai-native Everyone is claiming AI in AppSec, but there are meaningful differences in how AI is used, leading to fundamentally differences in exposure Wed, 10 Jun 2026 13:09:36 GMT https://xint.io/blog/ai-wrapper-vs-ai-native AI for SecurityFAQ Hector Leano https://xint.io/blog/using-context-idor-vulnerability-healthcare In an engagement with a healthcare client, Xint uncovered an IDOR vulnerability allowing unauthorized access to patients' protected health information (PHI). Tue, 02 Jun 2026 19:19:36 GMT https://xint.io/blog/using-context-idor-vulnerability-healthcare Vulnerability ResearchAI for SecurityCase Study Xint https://xint.io/blog/ai-application-security-testing-reliability Non-deterministic LLM vuln discovery is actually a strength for Xint since it can go beyond fixed rules or patterns that are easily gamed by attackers. Thu, 28 May 2026 14:33:24 GMT https://xint.io/blog/ai-application-security-testing-reliability ProductAI for SecurityFAQ Hector Leano https://xint.io/blog/ai-cybersecurity-role-changes LLMs are changing the role of security researchers and engineers, but companies laying off human cyber experts just as AI coding generates more vulnerable code are in for a world of hurt. Tue, 26 May 2026 15:51:13 GMT https://xint.io/blog/ai-cybersecurity-role-changes AI for SecurityFAQ Hector Leano https://xint.io/blog/copy-fail-pod-to-host A walkthrough of Copy Fail (CVE-2026-31431) as a container escape primitive: from a 4-byte page cache write to host root on Kubernetes. Tue, 19 May 2026 14:53:42 GMT https://xint.io/blog/copy-fail-pod-to-host Vulnerability ResearchAI for SecurityOpen Source Projects Juno Im https://xint.io/blog/xints-false-positive-rate We don’t know the FP rate for the latest frontier models when it comes to AppSec. We share ours and how we arrived at it. Mon, 18 May 2026 15:52:00 GMT https://xint.io/blog/xints-false-positive-rate ProductAI for Security Hector Leano https://xint.io/blog/kernel-vulnerabilities-ios-ipados This is an overview of the two kernel-level vulnerabilities uncovered by Xint Code in MacOS, iOS and iPadOS which have been patched by Apple Tue, 12 May 2026 16:25:29 GMT https://xint.io/blog/kernel-vulnerabilities-ios-ipados Vulnerability ResearchAI for SecurityNews Hector Leano https://xint.io/blog/zero-data-retention-llms Zero data retention (ZDR) policies for LLMs in AppSec are not the default, but here's why they belong at the top of your AI procurement checklist. Mon, 11 May 2026 17:45:21 GMT https://xint.io/blog/zero-data-retention-llms Product Hector Leano https://xint.io/blog/what-to-ask-ai-pentest-vendor These are the 8 questions that will tell you whether a vendor is selling a pen test alternative, a faster SAST tool, or a demo that doesn’t survive production Wed, 06 May 2026 18:52:00 GMT https://xint.io/blog/what-to-ask-ai-pentest-vendor AI for SecurityProduct Hector Leano https://xint.io/blog/171258 There's a difference between insecure code patterns and true vulnerabilities that hackers seek to exploit. Why does that matter? Tue, 05 May 2026 18:09:33 GMT https://xint.io/blog/171258 Vulnerability ResearchAI for SecurityProduct https://xint.io/blog/170315 The story behind CVE-2026-31789 demonstrates how DARPA and Xint are accelerating AI cyber defenses Mon, 04 May 2026 20:34:41 GMT https://xint.io/blog/170315 CompetitionsNews Vulnerability ResearchOpen Source Projects Hector Leano https://xint.io/blog/copy-fail-linux-distributions Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE. Wed, 29 Apr 2026 16:32:14 GMT https://xint.io/blog/copy-fail-linux-distributions AI for Security Vulnerability ResearchOpen Source Projects Juno Im https://xint.io/blog/167832 What do buyers actually purchase when they pay for a vulnerability discovery platform, and why is the model the cheapest input in the bill? Mon, 27 Apr 2026 21:41:01 GMT https://xint.io/blog/167832 Vulnerability ResearchAI for Security https://xint.io/blog/ai-hacker-xint-samsung-it-security-automation Press Release for April 21, 2026 Tue, 21 Apr 2026 16:56:40 GMT https://xint.io/blog/ai-hacker-xint-samsung-it-security-automation News Hector Leano https://xint.io/blog/the-frontier-isnt-the-model-why-good-enough-reasoning-scaffolding-is-more-important-165229 In this exclusive report, Xint researchers compare Mythos's publicly disclosed results versus what broadly available models can accomplish using advanced scaffolding Thu, 16 Apr 2026 18:09:00 GMT https://xint.io/blog/the-frontier-isnt-the-model-why-good-enough-reasoning-scaffolding-is-more-important-165229 AI for Security Vulnerability Research Hector Leano https://xint.io/blog/ai-made-code-cheap-trust-did-not-165231 While code is abundant, assurance is scarce. The winners won't be the teams that generate the most code, it’ll be the teams that can prove it's safe. Mon, 13 Apr 2026 18:11:00 GMT https://xint.io/blog/ai-made-code-cheap-trust-did-not-165231 AI for Security Hector Leano https://xint.io/blog/finding-and-patching-a-cpython-0day-in-hours-cve20266100-165230 A critical CPython CVE today took less than 45 minutes of human work to find, triage, and fix because of Xint Code Mon, 13 Apr 2026 18:10:00 GMT https://xint.io/blog/finding-and-patching-a-cpython-0day-in-hours-cve20266100-165230 Vulnerability ResearchOpen Source Projects Hector Leano https://xint.io/blog/how-xints-predictable-pricing-solves-the-token-burn-problem-for-ai-in-appsec-165232 Linear increases in code are leading to exponential token burn increases. Xint's orchestration brings clear, predictable pricing. Thu, 09 Apr 2026 18:15:00 GMT https://xint.io/blog/how-xints-predictable-pricing-solves-the-token-burn-problem-for-ai-in-appsec-165232 AI for Security Hector Leano https://xint.io/blog/what-are-business-logic-vulnerabilities-and-why-are-they-so-hard-to-catch-165233 Even secure-looking code can hide dangerous flaws. Learn why business logic vulnerabilities are hard to detect and why most scanners miss them. Thu, 05 Mar 2026 18:16:00 GMT https://xint.io/blog/what-are-business-logic-vulnerabilities-and-why-are-they-so-hard-to-catch-165233 AI for Security Hector Leano https://xint.io/blog/announcing-xint-code-165235 Real Vulnerabilities. Actionable Results. Mon, 15 Dec 2025 19:17:00 GMT https://xint.io/blog/announcing-xint-code-165235 AI for SecurityProduct Hector Leano https://xint.io/blog/ai-cyber-challenge-and-theoris-roboduck-165238 An introduction to DARPA's AI Cyber Challnge and Theori's third place cyber reasoning system Fri, 08 Aug 2025 18:22:00 GMT https://xint.io/blog/ai-cyber-challenge-and-theoris-roboduck-165238 CompetitionsAI for Security Hector Leano https://xint.io/blog/building-effective-llm-agents-ai-cyber-challenge-165236 How we learned to build effective LLM agents for hacking at DARPA's AI Cyber Challenge (AIxCC) Fri, 08 Aug 2025 18:18:00 GMT https://xint.io/blog/building-effective-llm-agents-ai-cyber-challenge-165236 AI for SecurityCompetitions Hector Leano