HackerSec

Reference in Offensive Cybersecurity

[Andrew Martinez @AndrewHackerSec]

We will soon release version 3 of our autonomous pentest agent, Yaga, which will now be considered Superintelligence.

[Andrew Martinez @AndrewHackerSec]

We’ll soon be launching the new benchmark for HackerSec’s pentest agent, Yaga.

[Andrew Martinez @AndrewHackerSec]

American AI companies have started discussing slowing down the development of advanced models due to safety concerns. But the problem is that China is not slowing down. It is accelerating across technology, hardware, semiconductors, energy and infrastructure.

This is the most dangerous line in the current race. Moving too fast increases risk, but slowing down can hand a strategic advantage to those who keep advancing without the same concerns.

We are entering a race where progress in AI must happen alongside progress in cybersecurity. Never in history have these two fields been so important and, at the same time, so poorly understood by most people.

[HackerSec @HackerSec]

How the Pentest Agent, YAGA, scores contextual criticality

https://t.co/grWgY9ecgB

[HackerSec @HackerSec]

The AI-Native Pentest Platform

https://t.co/ARn7PvKWRD

[HackerSec @HackerSec]

Pentest Agent: Yaga Containment Architecture

https://t.co/KLfnYy7HXP

[HackerSec @HackerSec]

Pentest AI-First vs. AI-Native: AI-driven Pentesting

https://t.co/0CoDPz1vYu

[HackerSec @HackerSec]

Benchmark: YAGA vs. Standalone LLMs

https://t.co/qSExG1uBx4

Get autonomous AI pentests

[Andrew Martinez @AndrewHackerSec]

Anthropic has just reported three cybersecurity incidents involving real systems belonging to third-party companies.

The funny part is that this happened shortly after OpenAI reported a similar incident during an internal evaluation of its models.

During cybersecurity evaluations, Claude models accessed the internet and gained unauthorized access to the real systems of three organizations. In other words, the test escaped the controlled environment and reached the real world too.

Now the question is: how much of this was really an accident? Or are we watching major marketing plays designed to show the market how far these models can go? It seems the new benchmark for AI companies is to compromise a third party and then publish the incident.

But whether this was an incident or marketing, one thing is clear. OpenAI and Anthropic are using cybersecurity to train and prove the capabilities of their models. This shows that AI and cybersecurity need to evolve side by side. Because if these models keep advancing at this speed while cybersecurity keeps trying to catch up, the chaos in the real world could be much greater.

[HackerSec @HackerSec]

Autonomous Pentest Agent - YAGA exploiting Active Directory

https://t.co/Vb1YIGshnQ

[HackerSec @HackerSec]

Discover the New AI-Native Pentest

https://t.co/3rbjq6CrY2

[HackerSec @HackerSec]

How the Pentest Agent, YAGA, Explores Linux Environments

https://t.co/DTOirRum50

[HackerSec @HackerSec]

AI-Powered Pentest Agent: Yaga – Exploring Mobile Applications

https://t.co/oRPfQ06MIf

[HackerSec @HackerSec]

Benchmark Yaga Pentest Agent

https://t.co/AtC9ZGnr2M

[Andrew Martinez @AndrewHackerSec]

Our goal of ZEROING the number of false positives in vulnerabilities reported by Yaga is not to replace pentesters, but quite the opposite, to expand our team of pentesters that currently already operate with Yaga, analyzing, validating and improving increasingly deep results in pentests.

[Andrew Martinez @AndrewHackerSec]

In recent days, we have worked intensively on Yaga, the pentest agent from @HackerSec, reducing the false positive rate for vulnerabilities found from 8% to 2.2%. The expectation is to bring it below 1% by August.

[HackerSec @HackerSec]

HackerSec & e-Safer: Partners in Next-Gen Offensive Cybersecurity

https://t.co/v8bQ92RAw3

[HackerSec @HackerSec]

Penetration testing made simple, just the way it should be.

https://t.co/01t7KNGizx

[HackerSec @HackerSec]

How YAGA bypasses protected environments with Pentest

https://t.co/pV2y09lM2B

[HackerSec @HackerSec]

How Yaga Exploits Chained Vulnerabilities

https://t.co/wA237vPJcU