# Blogs

Thoughts, perspectives, and industry commentary from the Cobalt team.

## [5 Key Takeaways from the 2026 State of Pentesting Report](https://www.cobalt.io/blog/5-key-takeaways-from-the-2026-state-of-pentesting-report)
April 21, 2026  · by [Gunter Ollmann](https://www.cobalt.io/blog/author/gunter-ollmann)

Pentest data reveals a stark divide between organizations with an ad-hoc testing model and those with a programmatic approach.

[Read more](https://www.cobalt.io/blog/5-key-takeaways-from-the-2026-state-of-pentesting-report)

## [Cobalt Pentester Spotlight — Lautaro Colombo](https://www.cobalt.io/blog/cobalt-pentester-spotlight-lautaro-colombo)
April 24, 2026

Est Read Time: 5 min

The Cobalt Pentester Spotlight highlights the fascinating journey of our Core members. Through an interview style, we...

[Read more](https://www.cobalt.io/blog/cobalt-pentester-spotlight-lautaro-colombo)

## [New Cobalt Research: Navigating 2026’s Nation-State and Supply Chain Threats](https://www.cobalt.io/blog/new-cobalt-research-navigating-2026s-nation-state-and-supply-chain-threats)
April 21, 2026

Est Read Time: 3 min

We are currently operating in a global geopolitical powder keg. As regional conflicts fundamentally redraw the cyber...

[Read more](https://www.cobalt.io/blog/new-cobalt-research-navigating-2026s-nation-state-and-supply-chain-threats)

## [Hacking Flutter Apps: Static, Dynamic, and Beyond](https://www.cobalt.io/blog/hacking-flutter-apps-static-dynamic-and-beyond)
April 15, 2026

Est Read Time: 10 min

Flutter is Google’s cross-platform app framework that lets developers write apps in Dart and ship them to Android, iOS,...

[Read more](https://www.cobalt.io/blog/hacking-flutter-apps-static-dynamic-and-beyond)

## [Mythos: The Ultimate Pentesting Tool?](https://www.cobalt.io/blog/mythos-the-ultimate-pentesting-tool)
April 13, 2026

Est Read Time: 2 min

When I first read what Mythos was capable of, it was clear we’ve reached an inflection point sooner than expected....

[Read more](https://www.cobalt.io/blog/mythos-the-ultimate-pentesting-tool)

## [Cobalt Pentester Spotlight — Orhan Yildirim](https://www.cobalt.io/blog/cobalt-pentester-spotlight-orhan-yildirim)
April 2, 2026

Est Read Time: 7 min

The Cobalt Pentester Spotlight highlights the fascinating journey of our Core members. Through an interview style, we...

[Read more](https://www.cobalt.io/blog/cobalt-pentester-spotlight-orhan-yildirim)

## [Moving from Annual VAPT to CTEM (Continuous Threat Exposure Management)](https://www.cobalt.io/blog/moving-from-annual-vapt-to-ctem)
March 25, 2026

Est Read Time: 6 min

The accelerating speed of AI-powered cyberattacks has made traditional vulnerability assessment and penetration testing...

[Read more](https://www.cobalt.io/blog/moving-from-annual-vapt-to-ctem)

## [How Cobalt Is Harnessing a Decade of Pentest Data for Hyper-Automation](https://www.cobalt.io/blog/how-cobalt-is-harnessing-a-decade-of-pentest-data-for-hyper-automation)
March 19, 2026

Est Read Time: 2 min

If your plan for securing a 40% larger attack surface this year is "work harder," you’ve already lost. We are living...

[Read more](https://www.cobalt.io/blog/how-cobalt-is-harnessing-a-decade-of-pentest-data-for-hyper-automation)

## [The Iranian Cyber Playbook: What Security Teams Should Expect](https://www.cobalt.io/blog/the-iranian-cyber-playbook-what-security-teams-should-expect)
March 17, 2026

Est Read Time: 6 min

It’s a common misconception that geopolitical crises stay confined to the physical battlefields. If all of the action...

[Read more](https://www.cobalt.io/blog/the-iranian-cyber-playbook-what-security-teams-should-expect)