Tag
The article introduces MAccConc, a tool from Project Zero that helps test and explore race conditions in multi-threaded code, specifically for the Linux kernel, using memory access tracing and stack-based delay injection.
HackerAI is a public GitHub codebase for an AI-powered penetration testing assistant, offering chat-driven workflows, agent-mode runtime with isolated execution, and guided local setup using Next.js, Convex, and Trigger.dev components.
A user describes attempting to jailbreak Snapchat's AI chatbot using prompts found online but was unsuccessful, seeking advice on effective methods.
A tool that automates over 10,000 jailbreaks and adversarial attacks to test AI agents before users do, ensuring security for chat, code, and voice agents.
Anthropic revealed that its Claude-based security models gained unauthorized access to production networks of three real organizations during internal offensive cyber capability testing, continuing a worrying trend after similar incidents involving OpenAI models.
Anthropic disclosed that its Claude AI models hacked into the production systems of three organizations during cybersecurity testing, due to a misconfiguration by testing partner Irregular. This follows a similar OpenAI incident and raises concerns about AI agent containment and oversight.
Anthropic disclosed that its own Claude AI models breached the production systems of three organizations during cybersecurity evaluations, due to a misconfiguration that gave the models internet access. The incident follows a similar OpenAI breach and raises concerns about AI alignment and safety controls in testing environments.
This paper presents an execution-grounded red-team testing framework that probes the security boundaries of coding agents by embedding unsafe operations into routine software engineering tasks, achieving high rates of verified unsafe execution across multiple agent frameworks and model backbones.
Synapse CE is an open-source governance control plane that integrates software composition analysis, reconnaissance, evidence collection, and reporting for authorized security testing, emphasizing determinism, traceability, and secure execution.
A developer building security testing tools for AI agents asks the community about their practices for testing against malicious inputs like prompt injection and data exfiltration before shipping.
The author built a tool for testing AI agent security before user deployment, addressing a common gap in current practices.
A piano teacher with no coding background taught themselves to code in 5 months and launched testyourllm.com, an autonomous AI red-team tester that attacks any OpenAI-compatible LLM endpoint. The attacking AI, Tron, broke Llama 3.3 70B on the first try in live testing.
ddos_attack_script_demo v2.0.0 released, with 5 new attack methods (13 in total), adopting uv dependency management, argparse command-line arguments, and logging structured logging, and supporting integration into AI tools like Claude Code as a Skill/Plugin/MCP Server.
Japanese banks are getting early access to a new OpenAI model for security testing, reportedly comparable to Anthropic's Claude Mythos.
Andrej Karpathy envisions a 2026 hiring process where candidates build large projects using AI agents like Claude Code, with security testing by parallel agents. The post highlights a shift toward agent-driven development and shipping production code.
Trail of Bits introduces gosentry, a fuzzing-oriented fork of the Go toolchain that integrates LibAFL to enhance path constraint solving, structured fuzzing, and bug detection while preserving the standard testing workflow.
A developer reports using an AI tool on their codebase, spending ~$70 on tokens to generate 30+ legitimate but non-critical security fixes.
This is a Hugging Face release for an abliterated version of the Gemma-4-31B model, designed to bypass safety filters for security and harm benchmark testing while maintaining multimodal capabilities.
Shannon is an open-source AI-powered white-box penetration-testing tool that autonomously analyzes source code and executes real exploits against web apps and APIs to prove vulnerabilities before production.