Blog

One Click Account Takeover in Granola: How a Notification Link Broke Out of Electron

Alex Schapiro

·Jul 5, 2026

Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8n

Alex Schapiro

·Jul 15, 2026

More posts

Training Specialized Pentesting Models with Reinforcement Learning

Ahmed Allam

·May 24, 2026

Securing a DoD Contractor: Finding a Multi-Tenant Authorization Vulnerability

Alex Schapiro

·May 3, 2026

Autonomous Pentesting for Internal Infrastructure

Ahmed Allam

·Apr 17, 2026

Context-Aware Pentesting

Ahmed Allam

·Apr 16, 2026

Introducing Strix API: Pentesting, Agent-Native

Ahmed Allam

·Apr 15, 2026

Open Source Isn't Dead.

Alex Schapiro

·Apr 15, 2026

Pentesting Every Pull Request

Ahmed Allam

·Apr 14, 2026

Introducing the New Strix Platform

Ahmed Allam

·Apr 13, 2026

Uncovering a hidden BOLA in Appsmith's snapshot logic

Alex Schapiro

·Apr 12, 2026

How Strix found a critical auth bypass in etcd

Alex Schapiro

·Apr 12, 2026

Where Cybersecurity Goes From Here

Alex Schapiro

·Apr 12, 2026

Best AI Pentesting Tools in 2026: 8 Platforms Compared

Strix Team

·Mar 16, 2026

Partnering with Caido to Bring Precision & Control to Agentic Pentesting

Alex Schapiro

·Mar 15, 2026