Loading story…
Caido announced AI-driven capabilities that enable agents to work through its web-security testing platform, while researcher Joseph Thacker described an open-source integration allowing AI agents to use Caido’s SDK programmatically. The workflow can create replay sessions, manage findings, retrieve authentication tokens, and search captured proxy-request histories, giving agents access to testing context traditionally handled manually by researchers.
Thacker reported using Anthropic Claude Code alongside the integration to identify 15 vulnerabilities across six weeks, with most assessed as High or Critical severity. He said agent-assisted workflows can expand attack-surface coverage for bug bounty, penetration-testing, and red-team engagements, though experienced operators remain necessary to select targets, validate findings, and assess real-world impact.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Caido announced an AI-driven skill that connects AI agents to the Caido SDK. The integration lets agents create replay sessions, manage findings, retrieve authentication tokens, and search proxy-request history while retaining activity in the operator's Caido instance.
Joseph Thacker reported finding 15 vulnerabilities over the preceding six weeks using an AI-agent workflow integrated with Caido, with most rated High or Critical severity.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security researchers and vendors documented rapid progress in using large language models and autonomous agents for offensive security testing, from early machine-learning-driven exploitation in **Deep Exploit** to newer multi-agent systems such as **BLADE** and Mastra-based workflows. In controlled demonstrations, these systems automated parts of reconnaissance, privilege-escalation analysis, credential discovery, lateral movement, and reporting, while broader evaluations found modern models increasingly capable of code understanding, vulnerability reasoning, and black-box web assessment tasks. The reporting also highlighted industry milestones such as AI-assisted pentesting tools reaching top bug bounty rankings and the growing use of agent patterns including **ReAct**, **Plan-and-Execute**, and orchestrated multi-agent designs for security assessments. At the same time, the same body of work warned that AI-for-security deployments are creating new attack surfaces. Researchers observed internet scanning for exposed OpenAI-compatible `Chat Completions` endpoints, with likely goals including fingerprinting LLM servers, abusing unauthenticated inference, causing denial of service, and reaching downstream integrations such as **RAG**, tool calling, and URL fetching. Separate analysis warned that long-term memory in AI agents can preserve attacker-influenced instructions, stale conclusions, or misleading context across sessions, making provenance, freshness, access control, correction, and deletion critical controls. Across the studies, the message was consistent: AI agents are becoming more useful for security operations and testing, but their deployment requires strict governance, authentication, and safeguards against prompt injection, unstable execution, and low-quality automated findings.
Aug 15, 2026
Security researchers and regulators reported that frontier AI is accelerating software vulnerability discovery and compressing defenders’ response windows, prompting new warnings for critical sectors. Canada’s **Office of the Superintendent of Financial Institutions (OSFI)** privately told banks and insurers that advanced models, including Anthropic’s **Claude Mythos**, could reduce the time available to detect, assess, and contain flaws before exploitation. A separate European threat note from **Cigref** described exploitation timelines collapsing to seconds, broader abuse of legitimate sessions and public-facing applications, and growing concern over autonomous offensive AI activity affecting large enterprises and financial institutions. At the same time, multiple security studies said AI is improving coverage of known bug classes but still depends on human expertise to validate impact, chain weaknesses, and uncover novel attack paths. **Bishop Fox** showed AI-assisted testing helped identify issues including header-based verification bypasses and **SSRF**, but human analysts were needed to prove exploitability and business risk. **NCC Group** similarly pointed to James Kettle’s request-smuggling research, including findings tied to **`CVE-2025-32094`** and **`CVE-2025-49005`**, as evidence that high-impact discoveries still come from deep human-led research. Vendors are also addressing AI-platform risk directly: Google said it fully mitigated the **Dialogflow CX** “**Rogue Agent**” flaw, which could have enabled persistent malicious code injection and exposure of sensitive chatbot conversations across shared project environments.
Jul 30, 2026A new generation of free, AI-powered tools is transforming bug bounty workflows, enabling faster and more effective vulnerability discovery. The open-source CAI framework reportedly outperforms humans on CTF benchmarks and significantly reduces testing costs. These advancements make high-impact vulnerability discovery accessible to a broader range of security professionals and enthusiasts.
Jun 29, 2026