Trail of Bits released a Claude Code plugin marketplace with 26 security-focused skills for AI-assisted code analysis, including auditors for GitHub Actions, C/C++, Rust, and supply chains, plus tools…
NVIDIA's SkillSpector, an open-source security auditing tool for AI agent skills, was demonstrated in a tutorial that builds a pipeline to scan synthetic skill marketplaces for risks using LangGraph, …
A developer built TraceTree, a tool that scans files for malicious behavior using radare2 disassembly, YARA rule matching, and an ML pipeline. During OpenAI Build Week, Codex with GPT-5.6 helped trace…
A developer discovered a Windows trojan, Trojan:Win64/Lazy.PGPK!MTB, hidden in a typosquatting GitHub repository for an MCP server. The attacker used a staged launcher with a CMD wrapper and obfuscate…
A student developer built an open-source AI malware analyzer for cybersecurity education. The tool runs suspicious binaries through static analysis tools like YARA and ClamAV, then uses local LLMs or …