Information security
fromInfoQ
3 days agoCodeGuardian: A Model Context Protocol Server for AI-Assisted Code Quality Analysis and Security Scanning
Invoking security tools via an LLM and MCP reduces developer friction and context switching.
#vulnerability-detection
#vulnerability-detection
[ follow ]
#cybersecurity #ai-security #smart-contracts #ethereum #ai #mythos #avverifier #microsoft #software-development
fromSecuritymagazine
1 week agoOperationally Ineffective: Putting CVEs in a Chokehold with Privilege Disruption
A Common Vulnerability Exposure (CVE) that cannot reach the privilege plane is operationally ineffective - even at a CVSS Score of 10. This should be a core philosophy that is embedded into the fabric of software engineering.
Information security
#ai-security
Information security
fromTechzine Global
1 month agoHarness secures AI code and AI apps with two new modules
Harness launches AI Security and Secure AI Coding modules to detect, test, and protect AI components throughout the application lifecycle while scanning AI-generated code for vulnerabilities in real time.
Information security
fromThe Hacker News
1 month agoOpenAI Codex Security Scanned 1.2 Million Commits and Found 10,561 High-Severity Issues
OpenAI launched Codex Security, an AI-powered security agent that identifies, validates, and fixes vulnerabilities in code, now available in research preview with free access for one month.
fromSecurityWeek
1 month agoAutonomous Offensive Security Firm XBOW Raises $120M at $1B+ Valuation
XBOW uses AI reasoning and adversarial workflows to continuously test applications for security flaws. Unlike traditional point-in-time penetration testing, the platform operates autonomously to identify and validate vulnerabilities at machine speed, aiming to keep pace with both modern development cycles and AI-powered attackers.
Venture
Information security
fromFortune
1 month agoExclusive: RunSybil, a startup using AI to automate penetration testing, raises $40M in VC funding in round led by Khosla Ventures | Fortune
RunSybil secured $40 million in funding to deploy AI agents that autonomously conduct continuous penetration testing on live software systems to identify security vulnerabilities.
Information security
fromTechzine Global
1 month agoOpenAI unveils Codex Security to detect vulnerabilities in AI code
OpenAI's Codex Security tool uses AI and agent-based analysis to detect code vulnerabilities with reduced false positives by understanding entire codebase context and prioritizing actual security risks.
Artificial intelligence
fromSecurityWeek
2 months agoClaude's New AI Vulnerability Scanner Sends Cybersecurity Shares Plunging
Cybersecurity company stocks fell sharply after Anthropic announced Claude Code Security, an AI capability for finding code vulnerabilities, triggering market concerns about AI replacing traditional security solutions.
Information security
fromFortune
2 months agoAI can now hunt software bugs on its own. Anthropic is turning that into a security tool. | Fortune
Claude Code Security uses Anthropic's Opus 4.6 AI to review entire codebases, detect high-severity vulnerabilities, rate severity, and suggest fixes for developer approval.
Tech industry
fromZero Day Initiative
11 months agoZero Day Initiative - CVE-2024-44236: Remote Code Execution vulnerability in Apple macOS
Monitor specific ports to detect attacks exploiting this vulnerability.
Verify ICC Profile file transfers for suspicious characteristics to prevent potential attacks.
[ Load more ]