Research Worth Reading - Week 33, 2026
Ruby gadgets, an AI-found Artifactory hack, and the AI pipeline as both tool and target
PentesterLab Newsletter
PentesterLab Newsletter
Live Last read · last published · next check
Latest posts
Research Worth Reading - Week 32, 2026
AI as a research partner, not a replacement.
Like a 📚 club, but for 🪲.
Join me next Tuesday for the first edition of The Bug Club.
Research Worth Reading - Week 31, 2026
Reward hacking, shrinking harnesses, LLM-first SAST and agents that cheat.
R𝗲𝘀𝗲𝗮𝗿𝗰𝗵 𝗪𝗼𝗿𝘁𝗵 𝗥𝗲𝗮𝗱𝗶𝗻𝗴 - 𝗪𝗲𝗲𝗸 𝟯𝟬, 𝟮𝟬𝟮𝟲
The agents are playing Prison Break this week. We also have two very cool exploit chains and a question I keep coming back to: is AI going to make exploit chains more complex?
Research Worth Reading - Week 29, 2026
This week’s research is mostly about how AI changes the economics of vulnerability research by taking on the grunt work, exploring more paths and making it cheaper to keep digging long after the first
Research Worth Reading - Week 28, 2026
This week is less about whether AI can find vulnerabilities and more about what happens when you give it enough time, context and infrastructure to keep looking.
.)
Research Worth Reading - Week 26, 2026
This week feels like Cyber AI builder galore.
Research Worth Reading - Week 25, 2026
It looks like this week’s theme is complexity...
Research Worth Reading - Week 24, 2026
This is why we can’t have nice things...