Paul PriceOur agent found hardcoded credentials in a public JavaScript file in under 18 minutes. A chained SQL injection gave us everything else — 159 billion rows of consumer data and the competitive strategies of some of the world's biggest brands.
Responsible disclosures, new attack techniques and lessons from putting an autonomous attacker to work.
Paul PriceOur autonomous hacking agent found an unauthenticated SQL execution endpoint on BCG's X Portal. Behind it: 131 terabytes and 3.17 trillion rows of data.
Read More →Paul PriceOur autonomous agent chained four harmless bugs into a CVSS 9.8 org takeover of a $20M-funded AI recruiter — then gave itself a voice and talked to the target's AI. Clients included Anthropic, Stripe, and Monzo.
Read More →Paul PriceAn autonomous AI agent found a SQL injection in McKinsey's Lilli AI platform. What it extracted was worse than we expected.
Read More →Signup to updates from CodeWall.
