GitHub Security Lab researcher Kevin Stubbings built custom AI-driven audit workflows, called taskflows, on top of the lab’s open source Taskflow Agent, and used them to find and report more than 20 vulnerabilities in Android apps. Two of the disclosed bugs show what’s at stake. In OsmAnd, a navigation app with over 10 million downloads on the Play Store, an exported activity called MapActivity accepted intent extras that should have stayed restricted to an internal … More
The post GitHub’s AI agent found 24 Android app vulnerabilities appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
“Drunk” AI is terrible at keeping secrets
If you do one security check this quarter, make it agent memory
Authorizer: Open-source authentication and authorization for your apps