No clever alias. No mystique. Our latest Cobalt Core Pentester Spotlight features Prateek, a web, API, and mobile tester whose superpower is picturing the code behind an application while testing it. Years of code review will do that to you → hubs.la/Q04CGzTZ0

🇩🇪 When in Germany! Yesterday at #itsa2026, the Cobalt booth was bursting with people and brews—and this time, we’ll hack for currywurst. 😋 If you haven’t stopped by yet, we’ll be there tomorrow at Hall 6, Stand 434A. #itsa2026 #cybersecurity #pentesting #offensivesecurity

We’re live at the IT-SA Expo & Congress in Nuremberg! 🇩🇪 The conversations at Hall 6, Stand 434A have been great so far, from continuous offensive security testing to how AI is changing the attack surface for DACH and EU organizations. We'll be here through the 29th, so find us!

The PHP2Shell patches shipped October 21. Exploitation started four days earlier. The embargo leaked. Download patch. Diff it. Ask AI to build an exploit. Test. Repeat. That loop now takes hours, not days. Here's what defenders need to know → hubs.la/Q04CvfMw0

One AI pentest run can’t tell you what it missed. Results vary, and reruns alone don’t guarantee coverage. Cobalt CTO Gunter Ollmann explains why—and why scanners still matter. hubs.la/Q04CbgnV0 #AI #pentesting

The Cobalt team is gearing up for Halloween. 🎃 We’ve got a skeleton deep in World War Z, a cat pumpkin, a very serious vampire dog, and one cat who did not consent to a costume but is wearing it anyway. Happy Halloween from Team Cobalt. 👻 #Halloween #TeamCobalt

Our CEO, Sonali Shah, joins the IATA Cybersecurity Summit in Geneva to discuss continuous security assurance for aviation. 28 Oct | 14:00 | Room GVA1 hubs.la/Q04C2kZs0 #IATACyberSummit #AviationCyber

Cobalt’s research team audited the ax-llm inference runtime running on AXERA-TECH edge AI chips found in smart cameras, vehicles, and industrial systems. They found 7 vulnerabilities. CVEs publish October 31. Full technical breakdown → hubs.la/Q04BLkFZ0

Some things are scarier than ghosts. 👻 Pentester Bingo is back with a Halloween twist, featuring the spooky, cursed, and all-too-familiar moments that haunt pentesters everywhere.

Cobalt CTO Gunter Ollmann breaks down the token economics vendors don’t put in their pitch decks, and what buyers actually need to ask before comparing price tags → hubs.la/Q04Bq1xt0 #cybersecurity #AI #pentesting #offensivesecurity #autonomouspentesting

🌐 More pics from #InfoSecWorld, featuring CTO Gunter Ollmann’s talk on the latest research regarding how leading security teams are, and aren't, adapting to machine-speed threats. If you’re looking to continue the conversation, schedule a demo with us →  hubs.la/Q04BnM990

HeyJobs needed pentesting that could keep pace with continuous feature releases and compliance requirements under ISO 27001 and the EU AI Act. Cobalt was there to help. Read the full case study → hubs.ly/Q04BjxbB0

🌐 #InfosecWorld is a wrap! Thanks to everyone who stopped by Booth #608 and caught CTO Gunter Ollmann’s talk on what 2026 pentesting data actually says about AI risk. Until next time! 👋  #cybersecurity #pentesting #LLMsecurity #AI

Legacy pentests drain the life out of security teams: weeks of scoping calls, static PDFs that go stale overnight, and findings nobody can act on. Schedule a demo with us → hubs.la/Q04B23TB0

In a CI/CD shop, the attack surface from Monday morning can look meaningfully different by Friday afternoon. An annual pentest, or even a quarterly one, isn’t a security control at that cadence. Full piece via DEVOPSdigest → hubs.la/Q04zPLvS0

Our State of Pentesting Report 2026 shows why. 57% of C-suite executives say their organization consistently meets remediation SLAs. Only 15% of the practitioners doing the work agree. Confidence isn’t evidence. Testing is. Download here → hubs.la/Q04zFJCn0

Cobalt CTO Gunter Ollmann's latest piece covers what good scoping actually looks like, why the real work happens mid-engagement when findings redirect priorities, and why autonomous AI systems struggle with exactly that dynamic. Read on → hubs.la/Q04zlTXB0

AI is moving fast. So is the fear around it. But we’ve seen this movie before. 🎥 Cobalt CTO Gunter Ollmann looks back at the internet panic of the 1990s and what it can teach us about separating legitimate AI risk from FUD today → hubs.la/Q04zlJcg0

🌐 Infosec World is next week! If you're heading to Orlando, come find us! We’ll be at booth #608 from October 12-14.  Learn more and request some time to meet with us → hubs.la/Q04zlHrR0 #InfosecWorld #cybersecurity #pentesting #LLMsecurity #AI

Cobalt CTO Gunter Ollmann traces a pattern, explains what's legitimate versus manufactured, and makes the case for why the security community developing practices alongside capability is what actually works. Read the full piece → hubs.la/Q04z3DCF0