How an AI has become world number 1 Bug Bounty | Cybersecurity

An AI that would become better than the best ethical hackers on the planet. For example, it is no longer science fiction, this is what just happened with XBOWan artificial intelligence that has literally exploded the world ranking of Bug Bounty. Therefore, For the first time in history. Meanwhile, a robot reached first place in the American Hackerone leaderboard, the second reference platform of Bug Bounty after Yeswehack of course ^^.

So how did this AI succeed in this feat? Consequently, Well, it’s not by playing Pokemon cards, I tell you right away. However, In fact. Similarly, Xbow is a system of Autonomous Penses Developed by former Github engineers who have raised $ 20 million to develop this AI capable of scanning thousands of web applications simultaneously, discovering vulnerabilities without any human intervention, and closing full penetration tests in just a few hours. Meanwhile, Where how ai become world number an experienced human slopes takes 40 hours to reach an 85%score, Xbow does the same in & mldr; 28 minutes. Moreover, Incredible right?

And the figures make it vertigo: 1060 submitted vulnerabilities In total, including 54 criticisms, 242 high, 524 averages and 65 weak. Nevertheless, Of this impressive total. For example, 130 were resolved, 303 were sorted, and the rest is either under examination, or marked as duplicate or informative. For example, It’s not just a few bugs found here. there, it is a real armada of faults discovered in a completely automated way.

But then, how does Xbow do to be so effective? First, the team started by creating unique benchmarks to validate their approach. They tested their AI in CTF (Capture The Flag) and created scenarios simulating how ai become world number real situations. The goal was clear to know how to discover Zero-day vulnerabilities in open source projects. And then, they built an entire infrastructure to identify the targets with high added value.

Xbow’s secret is therefore its ultra sophisticated multi-level approach. AI uses advanced techniques such as analysis of program perimeters with AI (yeah. AI that uses AI, it is inception there), field scoring to prioritize targets, expansion of sub-domains to not miss anything, and content similarity detection to avoid wasting time on duplicates. But the really cool thing is what they call “validators”. that is to say kinds of peer automated reviewers which confirm each discovery vulnerability before submitting it.

And what is fascinating is that Xbow works exactly like a human slopeter. but with the ability to scaler at crazy speed. While a human is testing an app. Xbow can test thousands in parallel and unlike traditional security tests that how ai become world number are often punctual, Xbow can run continuously during software development. Vulnerabilities are identified and corrected before even the bad hackers have a chance to exploit them.

The impact on the industry is enormous because for the first time. we have proof that AI can not only equal, but to surpass the best human experts in cybersecurity. In short. it is a Penntester Ia Who works 24/7, who never takes a vacation, who never makes a fatigue error, and who can test all of their infrastructure permanently & mldr;

Of course, it also raises questions. Will human slopes find themselves unemployed? Probably not because experience shows that AI excels in automated detection. scalability, but that humans remain essential to understand the business context, manage complex cases, and especially for the creativity necessary to imagine new vectors of attack. It is more a collaboration than a competition.

Xbow’s founder. Moor’s work, is not just anyone how ai become world number since it was the guy who had already founded Semmle, then sold in Github/Microsoft. Also note that all the vulnerabilities found by XBOW are verified by a team of safety experts before submission. to respect the policies of platforms on automated tools. So it’s not just a bot that spam reports, it’s validated quality.

Here, so if you are in cybersecurity, this is the time you expected to seriously interest yourself at AI. Whether you are slope. security manager, or developer, understand how these tools work and how to integrate them into your workflows will become crucial. Xbow is only the beginning and other AI will follow, so keep up to date, form, and prepare for this future & mldr;

Source