AI-Powered Pentests Deliver Full Attack Chains Unlike Basic Vulnerability Scans
A new model of offensive testing is gaining traction in the market: AI-powered pentesting. Leading offensive cybersecurity companies are developing agents capable of executing increasingly large portions of a penetration test while complementing the work of human specialists. The technology increases speed, depth, and frequency of testing, yet it is still frequently confused with vulnerability scanning, a far simpler and more superficial solution.
Vulnerability scanning only searches for possible vulnerabilities. A scan runs pre-programmed checks to detect outdated versions, insecure configurations, and patterns associated with known vulnerabilities. It repeats payloads, compares responses, and generates alerts, often without understanding how the application works or confirming whether the flaw can actually be exploited. The output is typically an extensive list of possibilities that includes false positives and findings with little or no relevant business impact.
AI-powered pentesting operates differently. A specialized agent performs reconnaissance, enumeration, contextual analysis, business logic review, exploitation, and vulnerability validation. It interprets environment responses, forms hypotheses, selects new actions, and adapts its strategy throughout the test. The agent can also chain multiple weaknesses, advance through different attack paths, and produce evidence that demonstrates real-world impact. Each vulnerability is delivered with a technical description, business impact assessment, risk level, personalized recommendations, and a proof-of-concept containing detailed evidence. When applicable, the report includes reproduction steps, payloads, requests, and responses that prove exploitation.
This model currently complements manual pentesting, but its evolution points to a fundamental shift in how offensive testing will be conducted. Generic prompts alone do not create an AI pentest. A genuine AI pentest requires an architecture of specialized agents, memory systems, planning capabilities, scope controls, offensive tools, validation criteria, and a custom harness that guides the model through the entire operation. Many solutions marketed as AI pentesting remain scanners with new interfaces or generic models executing isolated actions.
Few companies have built proprietary offensive technology with the real ability to discover, exploit, and prove vulnerabilities. The majority of solutions labeled as AI pentesting still perform scans or connect generic models to offensive tools through prompts. A true AI pentest demands a complete architecture of specialized agents, proprietary tools, memory, planning, evidence validation, and a harness developed specifically to conduct the test from start to finish. In Brazil, only HackerSec has developed this capability with Yaga, its proprietary agent for web applications, APIs, mobile, and other environments. Internationally, XBOW and Aikido Security are also recognized in this category, yet the technical breadth, quality of deliverables, and integrations from the Brazilian company already place HackerSec ahead of XBOW in key criteria such as supported environments and results delivered.
Related articles
AI Agents Becoming Core InfoSec Skill Like Microsoft Office Proficiency
Working with AI in information security is shifting from a specialized skill to a baseline expectation similar to using Microsoft Office tools. The key difference lies in the cost of errors: poor Word usage wastes time, while mishandling AI agents burns subscription limits and corporate funds. The article details practical workshops from the Engineering October series covering AI agents from beginner tools to securing the agents themselves. Core concepts include distinguishing models from agents, managing context windows to prevent forgotten instructions, and using skills, MCP connectors, and sub-agents for efficiency. Real-world examples show agents handling CVE analysis, alert triage, and threat report reviews while highlighting risks like hallucinations and data exposure. Guidance covers safe deployment in isolated environments and the irreplaceable role of human expertise in strategy and verification.
Research Exposes Limitations in AI Skill Scanners for Agent Vulnerability Detection
An independent researcher evaluated three local vulnerability scanners for AI agent skill packages without using LLMs or external APIs. The test used 12 synthetic packages containing both benign and malicious instructions, including attempts to bypass consent via sub-agents and hidden instructions in nested files. Cisco Skill Scanner, NVIDIA SkillSpector, and AgentVerus were run in isolated containers. All three tools missed a critical delegation bypass in package 10, while correctly flagging an educational attack citation in package 5 as High severity. NVIDIA SkillSpector performed best on nested file detection, and the findings directly shaped the integration of a lightweight static analyzer plus optional NVIDIA scans into the CEO AI project. The study also highlighted the need to preserve detailed findings rather than relying solely on final safety scores.
Apple Tightens App Store Rules Against Non-Consensual Intimate AI Deepfakes
Apple has updated its App Store guidelines to explicitly prohibit applications that generate intimate deepfake images of real individuals without consent. Developers must now implement measures to prevent creation and distribution of such content and promptly remove any instances that appear. The company also banned the practice of submitting apps with hidden functionality that is activated after passing review, a tactic previously used by undressing services. Violations can result in both app removal and expulsion from the Apple Developer Program. The move follows similar actions against xAI's Grok chatbot, which added safeguards after Apple threatened removal over the same issue. The policy targets non-consensual intimate imagery rather than all deepfake technology.
CyberXero Deploys 51 AI Agents to Scan 4708 Targets and Implant 32 WebShells in 61 Seconds
Russian-speaking initial access broker CyberXero integrated Anthropic's Claude Code and the open-source PentAGI autonomous penetration agent into its attack pipeline, creating a cluster of 51 specialized AI agents. The group ran two parallel operations: one automated campaign targeting vulnerable WordPress and e-commerce sites worldwide using known exploits including CVE-2026-63030, CVE-2026-60137 and CVE-2026-4815, and a second, more targeted campaign against Ukrainian energy and critical infrastructure. In one recorded execution the AI cluster scanned 4708 public-facing hosts, compromised 429 WordPress administrative panels and dropped 32 WebShells within a 61-second window. Attackers bypassed model safety guardrails by resetting sessions and reframing requests as authorized penetration tests of their own infrastructure. The operation relied on an eight-node architecture that included a Linux workstation, configuration server, payload staging server and public Redis instances, two of which belonged to Chinese organizations. SOCRadar warns that session-level controls alone are insufficient and recommends enforcing system-level boundaries, minimal privileges and strict egress filtering for any AI agents.