A Veracode study found that 44% of AI-generated code contains at least one OWASP Top 10 vulnerability, and no model achieved a security pass rate above 68%, despite producing syntax-correct code 99% o…
Theori's Xint team reported 434 code-validated security findings across 28 applications built or rewritten with Anthropic and OpenAI coding models, with resource-exhaustion and denial-of-service flaws…
Theori built 28 apps using AI coding agents from Anthropic and OpenAI and found that while the models avoided common injection flaws like SQL injection and cross-site scripting, they introduced other …
Theori's Xint platform safely scanned over 2,500 live domains without disruption using autonomous AI agents for penetration testing, implementing a two-layer safety architecture that includes operatio…
Xint, an LLM-based security tool developed by Theori, reports a false positive rate of less than 25% for its highest-severity vulnerability findings, based on manual validation through proof-of-concep…
A critical Linux vulnerability, tracked as CVE-2026-31431 and named CopyFail, was publicly disclosed on Wednesday after being privately reported to the Linux kernel security team five weeks prior. The…
"Copy Fail" (CVE-2026-31431), a logic bug in the Linux kernel's authencesn cryptographic template that allows an unprivileged local user to execute a deterministic 4-byte write into the page cache of …
Theori, a cybersecurity company led by CEO Brian Pak, announced that its AI hacker solution, Xint, has been adopted by Samsung Electronics to automate security for large-scale IT assets. Xint autonomo…
Theori's open-sourced Cyber Reasoning System (CRS) called RoboDuck, developed for DARPA's AI Cyber Challenge (AIxCC). The system uniquely uses an "LLM-first" approach to find bugs and generate Proofs …