Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog

Particle-1 Verifies 4 of 11 Runs, and Its Four Exploits Cost About $1 Combined

Kimi K3.1 Pro Verifies 7 of 11 Runs After Moonshot Says It Curbed Its Hacking Ability

DeepSeek’s New V4.1 Flash Snapshot Ties the Old One at 4 of 11, and Solves One More Task

Meta’s Muse Spark Open Lands Its First Verified Exploit in Our Hacking Race

Meta's Muse Wonder Goes From Zero to Tying GPT-6 Sol in One Generation

Claude Haiku 5.5 Had the Exploit in Reach and Argued Itself Out of It

Mistral Large 4 Finds the Bug but Can't Finish the Exploit

GPT-6 Sol went 4-for-4 in the Hacking Arena without faking a single flag

DeepSeek V4.1 Flash is Now Our Best Hacking Model

Muse Spark 1.3 got in. Then it forgot to finish the task.

Nice2Meet: We Turned Teams Mobile Meetings Into a Silent Account Takeover

Shooters Shoot. AI Models Mimic.

FlagLeft: We Found A Forgotten Flag That Turned Microsoft 365 Apps Into a Silent Account Takeover Pipeline for Billions of Users

MapRoot: A Tale of Two Zero-Days, Two Patches, Two Bypasses Leading to Cross-Tenant RCE on Microsoft Planetary Computer

NGINX Rift impact in the wild: we scanned 1,465 configs from 528 popular repos (CVE-2026-42945)

How We Could Watch Your Azure SRE Agent In Real Time
