Articles Tagged “Vulnerability Detection”
17 articles found
Anthropic OSS Scanner: Free AI Bug Scans for Open Source
Anthropic's OSS Scanner gives open-source maintainers free AI vulnerability scans with fixes; 85 of 97 tested severe findings met its disclosure bar.
GitHub AI Taskflows Found 24 Android App Vulnerabilities
GitHub Security Lab used open-source AI taskflows to uncover 24 Android app vulnerabilities, with every finding reviewed by a human before disclosure.
WordPress Plugin Updates Now Get AI Security Reviews
WordPress.org now scans every plugin release with AI models and Jetpack Scan during a 6-hour cooldown, blocking high-risk updates before they reach sites.
OpenAI Astra Ships With Cyber Safeguards Built First
OpenAI rated Astra Critical for cyber capability, scoring 100% on ExploitBench, and gated its security features behind the Daybreak Blue program.
Gemini 3.8 Flash Cyber Fixes 2.6x More Chrome Bugs
Google's Gemini 3.8 Flash Cyber wrote 2.6x more correct Chrome patches than larger commercial models, and 3.8 Flash starts at $0.75 per million tokens.
GLM-5.3 Posts an 84.5% CyberGym Cyber Defense Score
Z.ai's GLM-5.3 lifts CyberGym from 77.2% to 84.5% on post-training alone, and the team is holding weights back two weeks for safety hardening.
Chrome's Gemini Bug Hunter Found a 13-Year-Old Flaw
Google's Gemini-based scanner surfaced a Chrome sandbox escape hidden for 13 years, and AI triage now helps the team ship two security releases a week.
Microsoft Project Perception Puts AI Agents on Defense
Microsoft unveiled Project Perception on July 27, an agentic security platform with red, blue and green AI agents plus the MAI-Cyber-1-Flash model.
Snowpick Open-Source Scanner Checks ServiceNow Exposure
Bishop Fox released Snowpick, a free Go tool that tests your own ServiceNow portal for unauthenticated data exposure across 26 table checks.
Microsoft Dusseldorf Brings Open-Source OAST to Your Servers
Microsoft open-sourced Dusseldorf, a self-hosted OAST platform catching 4 blind bug classes while keeping callback data on your own servers.
VulnHunter Open-Sources Capital One's AI Bug Hunting
Capital One released VulnHunter under Apache 2.0 — an agentic security tool that traces exploit paths and tries to disprove its own findings first.
CVE Lite CLI Scans npm Projects Right in Your Terminal
CVE Lite CLI, now an OWASP Incubator project, checks JavaScript lockfiles against the OSV database and suggests one-line fixes for npm, pnpm, Yarn, and Bun.
AISLE Snapshot Brings Frontier Vulnerability Scanning In-House
AISLE Snapshot deploys frontier-class vulnerability detection inside a company's own cloud or air-gapped network, so source code and security data never leave their control.
Microsoft's MDASH Sends 100+ AI Agents to Find and Prove Bugs — Now Wired Into Defender
At Build 2026 on June 2, Microsoft expanded MDASH, its 100-plus-agent vulnerability hunter, integrating it with Defender after a 96.55% score on the CyberGym benchmark.
OpenAI Launches Daybreak — Codex Security and Three GPT-5.5 Variants Team Up to Find and Patch Vulnerabilities
OpenAI launched Daybreak on May 12, 2026 — a cybersecurity initiative pairing Codex Security with three GPT-5.5 variants and eight major partners including Cisco, Cloudflare, CrowdStrike, and Palo Alto Networks.
Microsoft Unveils MDASH — A Multi-Model Agentic Scanning Harness That Tops the Vulnerability Benchmark
Microsoft announced MDASH on May 12, 2026 — a multi-model agentic scanning harness that delivers state-of-the-art results on a leading industry vulnerability discovery benchmark and orchestrates frontier models for defensive cybersecurity.
OpenAI Launches Daybreak — A Codex Security Platform for AI-Powered Vulnerability Detection With Tier-1 Partners
OpenAI launched Daybreak on May 11, 2026 — a cybersecurity platform built on Codex Security and GPT-5.5-Cyber for vulnerability detection, threat modeling, and patch validation with Cisco, Cloudflare, CrowdStrike, and more.