Blog

OWASP’s new Autonomous Penetration Testing Standard (APTS) establishes governance, safety, and accountability requirements for AI-driven pentesting platforms operating in production environments.

7 signs your pentest report is outdated. Learn how changes, new CVEs, and deployments quickly make annual testing unreliable.

A CVSS 10.0 RCE vulnerability in Google Gemini CLI allowed external attackers to execute commands on host systems, turning CI/CD pipelines into supply-chain attack paths.

Novee researcher discovered a high-severity arbitrary code execution vulnerability in Cursor IDE (CVE-2026-26268). Learn how AI agents and Git hooks create a dangerous new attack surface for developers.

Modern application penetration testing helps teams uncover logic flaws, chained exploits, and real risks in fast-changing apps.

Pentesting and red teaming are often confused, but they answer very different security questions. While pentesting identifies technical vulnerabilities, red teaming tests whether your organization can detect and respond to…

Anthropic's Claude Mythos and Project Glasswing proves AI can find vulnerabilities faster than humans, but discovering bugs in open-source code is a different problem than continuously validating exploitability, delivering fixes,…

Novee CEO Ido Geffen sits down with CyberRisk TV to discuss finding vulnerabilities, and fixing them before the bad guys can exploit them.

Explore ChatGPT pentesting limits: blind spots, false positives, compliance risks, and how to validate findings safely.