Opinion — Editorial Perspectives

Opinion Pentesting

The XSS Is Gone. The IDOR Is Everywhere.

Mon, 20 Jul 2026 • By Ben Williams

AI-assisted development is quietly rewriting the vulnerability profile - away from injection, toward broken authorisation. That shift breaks more than our code. It breaks our tooling and our instincts.

Opinion Pentesting

AI Pentesting Frameworks: Impressive, Impractical, and Inevitable

Sun, 22 Feb 2026 • By Ben Williams

An honest assessment of AI pentesting frameworks from someone who has built and tested them. The tools are impressive with premium models but collapse with anything smaller, remain vulnerable to prompt injection attacks, and face a confidentiality problem with no near-term solution. But the trajectory is undeniable, and we all know it.

GitHub

Opinion Agents

OpenClaw: Give It Access to Your Machine? What Could Go Wrong?

Sat, 21 Feb 2026 • By Ben Williams

OpenClaw, the open-source AI agent controllable via WhatsApp, has over 215,000 GitHub stars and a growing skills ecosystem. It requires access to your system, stores credentials in plaintext, and has already been hit by supply chain attacks and critical vulnerabilities.