Beijing-based AI company Z.ai has released an open-weight model, GLM-5.2, that rivals Anthropic's powerful Mythos 5 in cybersecurity tasks, raising concerns as it can be downloaded and run without saf…
A developer describes how combining shift-left testing with machine learning can predict where bugs will appear before code is merged. By analyzing historical defect data and commit-level features suc…
Cloudflare's Durable Objects now stay alive for the full duration of active outbound connections, eliminating the need for heartbeat code to prevent eviction during LLM token streaming. Zhipu's GLM-5.…
Dockfix Labs launched AgentGuard, an open-source static analysis tool for AI agent security, and analyzed its early traction. The tool received 920 downloads on PyPI with only 1 star and 1 comment, hi…
Andrej Karpathy's AI coding rules, The Batch's 'loop engineering' issue, and Claude Code lead Boris Cherny's flat org structure signal that the unit of AI work has shifted from prompts to self-correct…
Zhipu AI's GLM-5.2 open-weight model matches Anthropic's Mythos in cybersecurity benchmarks, raising concerns that US export controls have failed to slow China's AI progress. The model's open-weight n…
Chinese AI models have caught up to top US systems in cybersecurity, with Zhipu AI's GLM-5.2 matching Anthropic's Mythos in bug-finding scenarios, according to a Wall Street Journal report. The narrow…
A developer outlines mobile app security best practices for React Native and Expo apps in 2026, focusing on the OWASP Mobile Top 10. Key recommendations include using expo-secure-store instead of Asyn…
Chinese AI lab Z.ai's open-weight GLM 5.2 model scored 39% F1 on IDOR vulnerability detection, beating Anthropic's Claude Code's 28-37% at roughly $0.17 per vulnerability found, according to Semgrep b…
Semgrep co-founders Isaac Evans, Drew Dennison and Luke O'Malley published a benchmark on June 22 showing that Zhipu AI's open-weight model GLM 5.2 scored 39% F1 on an IDOR vulnerability-detection tes…
Zhipu AI's open-weight GLM 5.2 model achieved a 39% F1 score in Semgrep's IDOR detection benchmark, outperforming Claude Code's 32% and Claude Opus 4.8. The MIT-licensed model runs locally, enabling s…
AgentGuard, an open-source static analysis tool for AI agent vulnerabilities, uses regex-based rules to detect prompt injection and other flaws in source code. Its creator, Dockfix Labs, is developing…
Dockfix Labs released AgentGuard, an open-source static analysis tool that scans AI agent codebases for all 10 OWASP Agentic Security Initiative risks, including prompt injection, tool abuse, and data…
Chinese AI systems have matched the performance of Anthropic's Mythos model in cybersecurity scenarios, with Zhipu AI's open-weight GLM-5.2 model surpassing Anthropic's Claude Opus 4.8 in some bug-fin…
Zhipu AI's open-weight GLM 5.2 model scored 39% F1 on IDOR detection in Semgrep's benchmark, beating Claude Code's 32% at a cost of $0.17 per vulnerability found. The test, designed to separate model …
Semgrep launched Guardian, a security tool for AI-generated code that scans and fixes vulnerabilities in real-time within the IDE. The product addresses the surge in unreviewed code from AI agents and…
Zhipu AI's open-weight GLM 5.2 model scored 39% F1 on IDOR detection in Semgrep's benchmarks, outperforming Claude Code (32%) at $0.17 per vulnerability. The model, released June 13, 2026, with MIT-li…
Aikido Security launched Code Audit, a feature using multiple AI agents to perform pentest-grade vulnerability discovery on static source code without requiring a live environment. The tool aims to he…
A developer released model-due-diligence, an open-source Python CLI tool that performs static supply-chain security checks on local AI model files and repositories before they are imported into runtim…
Semgrep's benchmark for AI-powered vulnerability detection shows its Semgrep Multimodal tool finds 3.5x more true positives than a tuned guided prompt at similar precision and lower cost per finding. …