Aikido Security outlines four distinct vulnerability detection methods—traditional SAST, Deep PR Review, AI Code Analysis, and AI Pentest—each covering different stages of the application lifecycle. T…
A security practitioner has coined the term 'interstitial vulnerabilities' to describe security flaws that emerge in the space between software components, where traditional scanning tools like SAST a…
A security researcher developed Lattice Mind, a hybrid AI security agent combining deterministic scanners with LLM intelligence, which solved the hardest challenges from PicoCTF 2025 and DawgCTF 2026 …
Autonomous coding agents with shell access, tokens, and no human oversight break traditional DevSecOps by acting at machine speed on external inputs, bypassing code review and CI gates. A developer ar…
Himanshu Anand published a defender playbook for the LLM era, arguing that attackers are automating exploit generation while defenders lag behind. He proposes running the same LLM-driven attack loop i…
Arm has open-sourced Metis, an agentic AI security framework that autonomously identifies complex software vulnerabilities by analyzing cross-component dependencies with semantic reasoning. The framew…
Snyk announces Continuous Offensive Security, a new AI-driven pentesting service that leverages LLMs to find context-dependent vulnerabilities like IDOR and authentication bypasses, which traditional …
The article distinguishes between a "weakness" (a theoretical code pattern that could cause issues) and a "vulnerability" (a specific, exploitable flaw in a live system). It argues that the security i…