XBOW

./𝚡𝚋𝚘𝚠 𝚙𝚠𝚗 𝚗𝚘𝚠

When you’re chasing a bug bounty, what’s the first thing you optimize for?

Eddie just posted an interesting change to SafeRE, done fully agentically - and it beats both RE2/J and Joni on Trino's own benchmarks. I feel so lucky to work with Eddie. Learning from him is a privilege, and it's what makes @Xbow special.

Want to see an IRIX Remote 0day? @moyix and @kallsyms have been playing using new strategies in legacy systems. As you might imagine they were quite prolific. See the bugs live at @Xbow booth at @BlackHatEvents

The history of hacking deserves to be celebrated! We’ve collected some zero days on relic hardware that shaped generations of hackers (or at least me), and we’ll be showcasing them at the XBOW Hacking Museum at our BH booth . Come say hi!

We'll be hacking the past + securing the future at Black Hat in Vegas! Come join us at Booth 3448. 😎 xbow.com/events/black-h…

./𝚡𝚋𝚘𝚠 𝚙𝚠𝚗 𝚗𝚘𝚠

@c3l3si4n We ran 5.6, and we did not publish anything since it was not showing meaningful results for us, so we decided to sit it out.

@Xbow I feel like GPT 5.6 is missing from the bencmarks

Affordable AI models are catching up fast. GLM and Muse Spark prove you don't need the most powerful model—you need one that's good enough at the right price to change the economics of offensive security. 📊 Take a look at the data:

75e9cfd536c703a153fc76085b4d5bc352af0892628904177b08ec4ff6625e60

Read our research: xbow.com/blog/affordabl…

@DrHawarey There's no publicly confirmed number to the best of our knowledge, but it's also said to be 3x as large, which would put it at around 4.5T parameters.

@Xbow Do you have certain number of parameters for Grok 4.5?

Our AI research team has been analyzing affordable AI models as they are released, most recently Grok 4.5. Here’s what we found: Grok 4.5 performs exceptionally well when you have more than a shoestring budget but still care about cost. It does not win at every price point, but across the broad middle-to-medium-high of the range, it is currently the strongest option we tested. Graphs in thread 🧵

The '90s brought the internet and built the playground we've been hacking ever since. Come throw it way back with us at Black Hat in Las Vegas! 📍Booth #3448 🔗xbow.com/events/black-h…

What’s your preferred model for bug bounties? (If you use a mix, comment in thread)

Read the full research here: xbow.com/blog/Grok-4-5-…