vulnerability-discovery

Tag

Cards List
#vulnerability-discovery

@seclink: Google believes that relying solely on large models themselves for vulnerability mining is not enough; the key is to combine harness ...

X AI KOLs Following · yesterday Cached

Google points out that relying solely on large language models in vulnerability mining is not enough; the key is to combine an agent-based vulnerability discovery framework. For example, its team used this tool to discover multiple critical vulnerabilities in a short time.

0 favorites 0 likes
#vulnerability-discovery

@seclink: Zhipu AI (https://Z.ai) today released GLM-5.3, which shares the same base model as GLM-5.2, with all improvements from post-training reinforcement learning (RL). 【1】Programming: Strongest in open-source, but still behind closed-source frontiers GLM-5.3 achieved...

X AI KOLs Following · 5d ago Cached

Zhipu AI released GLM-5.3, significantly enhancing programming and cybersecurity capabilities through post-training reinforcement learning, becoming the top open-source model for programming, and unexpectedly discovering numerous real vulnerabilities.

0 favorites 0 likes
#vulnerability-discovery

@seclink: Zhipu's latest flagship model GLM-5.3 has been officially unveiled, achieving major breakthroughs in programming capabilities and cybersecurity vulnerability detection, launching a new challenge to AI leaders like Anthropic and OpenAI. Indeed, large models are now applied in the cybersecurity field, especially replacing the blue team in previous red-blue team confrontations, those who did daily vulnerability hunting…

X AI KOLs Following · 6d ago Cached

Zhipu releases flagship AI model GLM-5.3, achieving major breakthroughs in programming and cybersecurity vulnerability detection, aiming to challenge leading enterprises like Anthropic and OpenAI.

0 favorites 0 likes
#vulnerability-discovery

@clearseclabs: Reaching Mythos: Hands-On Vulnerability Discovery with Local AI Models by @clearbluejar at DEF CON !

X AI KOLs Timeline · 2026-08-08 Cached

Announcement of a DEF CON talk by @clearbluejar on hands-on vulnerability discovery using local AI models.

0 favorites 0 likes
#vulnerability-discovery

Google fixed more Chrome bugs in June than over the past two years, thanks to AI

Hacker News Top · 2026-07-31 Cached

Google is using AI and LLMs to automate Chrome vulnerability discovery, triage, and patching, resulting in more bugs fixed in June than in the past two years, including a 13-year-old sandbox escape.

0 favorites 0 likes
#vulnerability-discovery

Google says it fixed more Chrome bugs in June than over the past two years, thanks to AI

TechCrunch AI · 2026-07-30 Cached

Google reports that AI tools helped it fix 1,072 security bugs in Chrome during June 2026, more than in the previous two years combined, highlighting the shift toward automated vulnerability discovery.

0 favorites 0 likes
#vulnerability-discovery

Anthropic is finding bugs faster than Microsoft can fix them

Ars Technica · 2026-07-29 Cached

Anthropic's Mythos AI model has been uncovering critical and important bugs in Microsoft's SharePoint and other software at a rate that outstrips Microsoft's ability to patch them, raising urgent security concerns about adversaries exploiting the same vulnerabilities.

0 favorites 0 likes
#vulnerability-discovery

@GoogleDeepMind: To ensure this model is deployed responsibly, we’re starting with a limited-access pilot for governments and trusted pa…

X AI KOLs · 2026-07-23 Cached

Google DeepMind introduces Gemini 3.5 Flash Cyber, a lightweight cybersecurity model fine-tuned for vulnerability discovery and patching, with a limited-access pilot for governments and trusted partners.

0 favorites 0 likes
#vulnerability-discovery

From Controlled to the Wild: Evaluation of Pentesting Agents for the Real-World

Hugging Face Daily Papers · 2026-07-14 Cached

This paper presents a practical evaluation protocol for assessing AI pentesting agents in realistic, complex targets rather than simplified benchmarks. It uses LLM-based semantic matching, bipartite resolution, and continuous ground-truth to score vulnerabilities discovered, and releases expert-annotated ground truth and code.

0 favorites 0 likes
#vulnerability-discovery

Are AI agents already exposing assumptions in the EU Cyber Resilience Act?

Reddit r/ArtificialInteligence · 2026-07-09

This paper examines how the EU Cyber Resilience Act's assumptions about human-paced vulnerability management may be undermined by increasingly capable AI agents, identifying which parts of the regulation remain robust and which may face pressure.

0 favorites 0 likes
#vulnerability-discovery

Beyond Static Rules: Automated Discovery of Latent Vulnerabilities in Text-to-SQL

arXiv cs.CL · 2026-07-07 Cached

Proposes SAGE, a framework for autonomously uncovering latent failure patterns in LLM-based Text-to-SQL generation by generating vulnerability hypotheses and iteratively verifying them. Experiments show SAGE reveals significant model fragility and discovered patterns transfer across models, with preliminary fine-tuning showing promising remediation.

0 favorites 0 likes
#vulnerability-discovery

Revealing Safety-Critical Scenarios for UTM via Transformer

arXiv cs.AI · 2026-07-01 Cached

This research paper proposes a transformer-based reinforcement learning framework to automatically generate safety-critical test scenarios for Unmanned Traffic Management (UTM) systems, achieving an 8× improvement in vulnerability discovery efficiency over expert-guided testing.

0 favorites 0 likes
#vulnerability-discovery

Aisle Discovers 6 New CVEs in Curl, Including the Oldest Issue Ever Reported

Hacker News Top · 2026-06-25 Cached

AISLE discovered 6 new CVEs in curl, including the oldest vulnerability ever reported (over 25 years old), using its model-agnostic AI system. All findings were fixed in curl 8.21.0.

0 favorites 0 likes
#vulnerability-discovery

@AdamShao: Officially open-sourcing my vulnerability discovery tool: http://flounders.xyz This is an AI Agent-based fully automated vulnerability discovery workflow. You just tell the AI which project's vulnerabilities you want to find, and it will automatically download code and documentation, deeply audit the code, discover suspicious vulnerabilities, automatically verify them locally and online…

X AI KOLs Timeline · 2026-06-24 Cached

Flounder is an open-source AI agent-based tool that automates vulnerability discovery in codebases. Users describe the target and the tool autonomously downloads code, conducts deep code audits, tests vulnerabilities locally and online, and generates reports.

0 favorites 0 likes
#vulnerability-discovery

Patch the Planet: a Daybreak initiative to support open source maintainers

OpenAI Blog · 2026-06-22 Cached

OpenAI announces Patch the Planet, an initiative with Trail of Bits to help open-source maintainers strengthen security by using AI models to identify and patch vulnerabilities, reducing the burden on maintainers.

0 favorites 0 likes
#vulnerability-discovery

@vintcessun: An 8-stage vulnerability discovery agent that runs on a Claude subscription, essentially a reproduction of the Cloudflare Project Glasswing paper. Multiple narrow agents + intentional disagreement verification + reachability gating, breaking down 'which piece of code can actually be exploited by an attacker' into 8 precise steps. Recon uses Opus to decompose tasks, H…

X AI KOLs Timeline · 2026-06-17

Introduces an 8-stage vulnerability discovery agent based on Claude subscription, reproducing the core ideas of the Cloudflare Project Glasswing paper. It uses multiple narrow agents, intentional disagreement verification, and reachability gating to break down exploit analysis into precise steps, without the need for API keys.

0 favorites 0 likes
#vulnerability-discovery

17 bugs in 10 weeks from AI security scanning

Lobsters Hottest · 2026-06-10 Cached

AI-based security scanning has discovered 17 bugs in Perfetto's trace processor over 10 weeks, highlighting the potential for AI to uncover vulnerabilities in long-tail code that previously received little attention.

0 favorites 0 likes
#vulnerability-discovery

An AI Agent Found 21 Zero-Days in FFmpeg for $1,000 — One Is a Network-Reachable RCE via a Single 183-Byte Packet

Reddit r/AI_Agents · 2026-06-09

An autonomous AI agent from depthfirst discovered 21 zero-day vulnerabilities in FFmpeg, including a network-reachable RCE via a single 183-byte packet, for only $1,000 in compute costs; the find highlights the disparity between automated bug finding and patching.

0 favorites 0 likes
#vulnerability-discovery

@vintcessun: What troubles security teams most is too many false positives in the vulnerability discovery process and lack of closed-loop fix verification. Anthropic's reference implementation directly breaks the entire process into an auditable seven-stage pipeline. The core design is not about stacking features, but building a verification chain—each finding must go through independent sandbox reproduction, deduplication, scoring, and finally the patch must also pass regression testing...

X AI KOLs Timeline · 2026-06-05 Cached

Anthropic has released an open-source reference implementation for vulnerability discovery and remediation, building a verification chain with a seven-stage pipeline based on Claude, aimed at reducing false positives and ensuring closed-loop fix verification.

0 favorites 0 likes
#vulnerability-discovery

Claude Mythos Preview Finds 10,000+ Critical Software Flaws With 50 Partners: Anthropic

Reddit r/ArtificialInteligence · 2026-05-23 Cached

Anthropic's Claude Mythos Preview model, used by 50 partners, has uncovered over 10,000 high- and critical-severity software vulnerabilities, including 2,000 bugs in Cloudflare's systems and a critical flaw in wolfSSL, signaling a paradigm shift in software security.

0 favorites 0 likes
Next →
← Back to home

Submit Feedback