Semgrep, a code security firm, reported that its early access to Anthropic's frontier AI model, codenamed Mythos, enabled its research team to find 100 runtime-verified vulnerabilities across top open…
VibeGuard v1.0.0, a security linter built specifically for AI-generated code, has been released on GitHub by developer zeroFhacker. The tool runs 47 AI-pattern rules to detect vulnerabilities commonly…
A developer's scan of public AI repositories against the EU AI Act found that nearly every one failed at least one requirement, with Articles 9 (Risk Management), 12 (Record-Keeping), and 14 (Human Ov…
Semgrep Multimodal, a security analysis tool from Semgrep, identified 63 manually reviewed IDOR vulnerabilities that Mythos missed across four repositories, with 40 findings reproducible across all th…
A developer built secfix, a vulnerability scanner that validates findings by executing code in a sandbox rather than relying on syntax analysis or AI-generated descriptions. The tool confirmed a real …
Taiwan's Ministry of Digital Affairs (MODA) confirmed that overseas hackers used AI agents to target government agencies in a cyberattack last month, compromising at least 85 government user accounts …
Z.ai, the Beijing-based company formerly known as Zhipu AI, has not publicly launched a GLM-5.3 model, but its open-weight GLM-5.2 model, released June 16, was assessed by the U.S. Center for AI Stand…
A developer building an LLM-based vulnerability scanner explains why he deliberately designed it to flag safe code, arguing that deterministic taint tracking with false positives is more trustworthy t…
Velonus released an open-source CLI that merges five Python security scanners—Bandit, pip-audit, Safety, Semgrep, and detect-secrets—into a single deduplicated tool, with the core scanner and normaliz…
Trail of Bits released a Claude Code plugin marketplace with 26 security-focused skills for AI-assisted code analysis, including auditors for GitHub Actions, C/C++, Rust, and supply chains, plus tools…
Anthropic shipped the Claude Security Plugin for Claude Code in public beta on July 22, a multi-agent vulnerability scanner that runs in the terminal and finds bugs that rule-based tools like Semgrep …
Argus, an open-source security scanner that orchestrates 20+ industry-standard tools including Semgrep, Trivy, Gitleaks, tfsec, Checkov, and OWASP ZAP behind a single command and an MCP server, is now…
Semgrep, the code security company, announced Semgrep Guardian, a security scanning tool integrated directly into AI IDEs and other AI code generation tools, to address the security risks of AI-genera…
Z.ai's GLM-5.2 scored 62.1 on SWE-bench Pro, beating GPT-5.5's 58.6, while costing $1.40 per million input tokens and $4.40 per million output tokens, making it 3.6x cheaper on input and 5.7x cheaper …
A developer describes the shift in application security from merely detecting vulnerabilities to automatically fixing them, enabled by AI agents that can reproduce bugs, write tests, and iterate on pa…
OpenAI released the open-source Codex Security CLI on npm on July 29, 2024, without a formal announcement, and it quickly gained 2,600 stars on Hacker News within 24 hours. The tool, which is Apache 2…
OpenAI quietly open-sourced its Codex Security CLI and TypeScript SDK on GitHub and npm under Apache 2.0 on July 28, 2026, but the tool requires a paid subscription to the Codex Security service to pr…
OpenAI released the Codex Security CLI as open-source code this week, but the underlying vulnerability scanner remains a limited beta for approved customers. The tool, previously called 'Aardvark,' ha…
Aikido's 2026 State of AI in Security & Development report finds nearly 70% of organizations uncovered flaws tied to AI-generated code, with 1 in 5 reporting serious incidents linked to AI code. Engin…
OpenAI open-sourced the Codex Security CLI and TypeScript SDK on July 28th, enabling developers to scan, validate, and patch vulnerabilities in software repositories locally or in CI pipelines. The Ap…