Specular's NVD-alternative vulnerability pipeline was built with a series of thin watchers on public sources. This surfaces new vulnerabilities 3 weeks before CISA KEV and allows response the next day.

Most vulnerability pipelines have a central flaw: over-reliance on the National Vulnerability Database (NVD) as a sole source of truth. Learn why NVD-based vulnerability pipelines are architecturally late and what the alternatives are.

An overview of Mythos-class frontier AI models, their significant (and sometimes over-simplified) impact on cybersecurity, and Specular’s view on how to help proactive organizations use this for a defensive advantage.

This blog post discusses how AI agents augmented with Retrieval Augmented Generation with specific cybersecurity domain knowledge can be leveraged to create a unified real-time view of assets, vulnerabilities, and internal business context.

Large Language Models (LLMs) have revolutionized many industries by replacing the need to Google for answers. However, for cybersecurity questions current information is critical for accurate analysis, and outdated LLM training data often results in hallucinations and incorrect answers. In this blog, we'll explore why Retrieval-Augmented Generation (RAG) is essential to augment LLMs with current threat information, and discuss popular data retrieval techniques used by foundation model providers.

Specular identified a SQL injection vulnerability in software commonly used by hospitals that allows an attacker to compromise sensitive data. This blog outlines how we identified the vulnerability using AI, software vendor and supply train trust, and coming data sources to identify hidden web application.