Skip to content

Events

Autonomous AI Security Testing graphic showing an AI attack swarm for Web App and API security

Field Notes from Black Hat and DEF CON 2026: What Changed in the Attacker Playbook?

Almost nothing in the attacker’s toolkit is new. The vulnerability classes on display at Black Hat USA 2026 and DEF CON 34 were the same ones security teams have tracked for a decade: request smuggling, SQL injection, SSRF, broken object level authorization. What changed is the economics. Attacks that used to need a specialist and… Read More »Field Notes from Black Hat and DEF CON 2026: What Changed in the Attacker Playbook?

Old Web Bugs, New Blast Radius: What Vegas 2026 Means for API Testing

Old Web Bugs, New Blast Radius: What Vegas 2026 Means for API Testing

Three vulnerability classes I’ve spent most of my career testing for turned up at Black Hat and DEF CON this year, wearing AI costumes. CSP bypass. SSRF. HTML injection race conditions. Every one of them was written off as solved; every one of them was reachable again. The clearest example was SearchLeak, disclosed by Varonis… Read More »Old Web Bugs, New Blast Radius: What Vegas 2026 Means for API Testing

Promotional graphic for FireCompass and EC-Council panel titled The Mythos Threat Is Real: How CISOs Should Respond, featuring a dark blue and purple abstract digital background.

FC & ECC Panel – The Mythos Threat Is Real: How CISOs Should Respond

AI has already changed offensive security. The open question for security leaders is what to do about it. A recent EC-Council CyberTalks session of the same name addressed the question directly, featuring FireCompass co-founders Bikash Barai and Arnab Chattopadhayay, along with a CISO from a global financial group. What follows is the part a CISO… Read More »FC & ECC Panel – The Mythos Threat Is Real: How CISOs Should Respond

AI in Offensive Security: Redefining Pen Testing and Red Teaming

AI in Offensive Security: Redefining Pen Testing and Red Teaming In a landmark keynote at Hacker Halted 2025 in Atlanta, US, Bikash Barai, Founder & CEO of FireCompass, shared his insights on how AI and automation are fundamentally transforming offensive security, penetration testing, and red teaming. The session highlighted the rapidly evolving cyber landscape, demonstrating… Read More »AI in Offensive Security: Redefining Pen Testing and Red Teaming

Panel Brief | Top Breaches in Cyber Security in 2025

Executive Summary By the end of 2025, one reality became impossible to ignore: the barrier to executing high-impact cyberattacks has collapsed. The most damaging breaches of the year were not driven by novel zero-days or exotic techniques. Instead, they reflected something more concerning-capabilities once limited to nation-state or elite criminal groups are now widely accessible.… Read More »Panel Brief | Top Breaches in Cyber Security in 2025

Use Cases
Technology
About
Partner
Resources

FireCompass – An EC Council Ecosystem Company.
©2025 . All Rights Reserved.

Firecompass ranked #1 AI on HackerOne. Read more →