Skip to content

Automated Penetration Testing

Fable 5 Just Refused Your Security Work. 7 Insights.

7 Insights: How Fable 5 (Mythos Avatar) Will Change Your Offensive Security Program

Yesterday, Anthropic shipped Fable 5, the public avatar of its Mythos-class model and the most capable model it has ever released to anyone with a subscription. Fable 5 and the gated Mythos 5 are the same underlying weights. What separates them is a layer of safety classifiers, separate models that inspect every request, and the… Read More »7 Insights: How Fable 5 (Mythos Avatar) Will Change Your Offensive Security Program

Promotional graphic for FireCompass and EC-Council panel titled The Mythos Threat Is Real: How CISOs Should Respond, featuring a dark blue and purple abstract digital background.

FC & ECC Panel – The Mythos Threat Is Real: How CISOs Should Respond

AI has already changed offensive security. The open question for security leaders is what to do about it. A recent EC-Council CyberTalks session of the same name addressed the question directly, featuring FireCompass co-founders Bikash Barai and Arnab Chattopadhayay, along with a CISO from a global financial group. What follows is the part a CISO… Read More »FC & ECC Panel – The Mythos Threat Is Real: How CISOs Should Respond

Continuous Offensive Security Testing Is Becoming a Category. Here’s What Most Vendors Will Get Wrong.

COST vs CTEM: What Continuous Offensive Security Testing Requires

Looking for the full COST definition? This post covers the market analysis. For the complete framework, triggers, and how FireCompass delivers Continuous Offensive Security Testing (COST) you can refer to: www.firecompass.com/continuous-offensive-security-testing When someone tells you they do continuous offensive security testing or COST, ask two questions. Q1: Can it prove the exploit with reproduction steps… Read More »COST vs CTEM: What Continuous Offensive Security Testing Requires

SEBI AI Guidelines: What 10k+ Financial Entities Must Do

SEBI AI Guidelines: What 10k+ Financial Entities Must Do

SEBI’s May 5, 2026, circular (HO/13/19/12(1)2026-ITD-1_CIMGI/10873/2026) is addressed to every category of regulated entity in the Indian securities market — exchanges, depositories, brokers, mutual funds, custodians, credit rating agencies, merchant bankers, portfolio managers, investment advisors, and more. Over 10,000 entities. The subject: AI-driven vulnerability detection tools like “Claude Mythos” and the new risk dimensions they… Read More »SEBI AI Guidelines: What 10k+ Financial Entities Must Do

10 Questions to Ask Your AI Pen Testing Vendor Before You Sign

10 Questions to Ask Your AI Pen Testing Vendor Before You Sign

The shortlist looks identical. The architecture is not. Every AI pen test vendor on your shortlist will tell you their false positive rate is under five percent. Their demos will look impressive. Their decks will name the same frontier models. This is the problem. Frontier model access is commoditizing. Any team can wire an Anthropic,… Read More »10 Questions to Ask Your AI Pen Testing Vendor Before You Sign