A threat actor published malicious releases of MemTensor's MemOS AI memory framework on September 23, 2026, compromising npm packages @memtensor/memos-cloud-openclaw-plugin versions 0.1.21, 0.1.23 and…
Semgrep, a code security firm, reported that its early access to Anthropic's frontier AI model, codenamed Mythos, enabled its research team to find 100 runtime-verified vulnerabilities across top open…
Semgrep Multimodal, a security analysis tool from Semgrep, identified 63 manually reviewed IDOR vulnerabilities that Mythos missed across four repositories, with 40 findings reproducible across all th…
Claude Mythos, Anthropic's frontier model, achieved 80.0% precision and 13.9% recall (F1 ~23.7%) on a benchmark of 275 human-reviewed IDOR vulnerabilities across four codebases, ranking 15th out of 17…
Z.ai's GLM-5.3 model, released today, matches Claude Opus 4.8's vulnerability detection F1 score of 23.6% at $0.15 per true positive versus Opus 4.8's $1.04, roughly a seventh of the cost, according t…
Semgrep, the code security company, announced Semgrep Guardian, a security scanning tool integrated directly into AI IDEs and other AI code generation tools, to address the security risks of AI-genera…
Semgrep launched nine Agentic Workflows in public beta that automate deep vulnerability hunting across codebases, covering 70+ CWEs including authentication, injection, and business logic flaws. The w…
Semgrep's benchmark of Kimi K3 against IDOR vulnerabilities shows competitive recall but significantly lower precision than frontier models, undermining its practical value for security work. The open…
Semgrep will have a major presence at Hacker Summer Camp 2026, with talks and a booth at Black Hat, BSidesLV, and DEF CON from August 4-8. Sessions cover AI-assisted development, LLM-based vulnerabili…
A new wave of open-source AI security harnesses uses large language models to find code vulnerabilities, with tools falling into three categories: LLM-led exploitgen, LLM-skill-boosting vulnerability …
OpenAI released GPT-5.6 Luna, Terra, and Sol, which cleared the 'High' cybersecurity capability threshold under OpenAI's Preparedness Framework, indicating the models can automate end-to-end attacks a…
Deploying AI models, even open-weight ones, introduces significant black box risk because current reverse engineering capabilities cannot predict model behavior or reliably detect backdoors. Research …
The FTC has begun fining companies for deceptive AI claims, including a 'robot lawyer' never trained on legal materials. Security engineers warn that many vendors are 'AI-washing' old products with ne…
Zhipu AI's open-weight GLM 5.2 model scored 39% F1 on IDOR detection in Semgrep's benchmark, beating Claude Code's 32% at a cost of $0.17 per vulnerability found. The test, designed to separate model …
Semgrep launched Guardian, a security tool for AI-generated code that scans and fixes vulnerabilities in real-time within the IDE. The product addresses the surge in unreviewed code from AI agents and…
Zhipu AI's open-weight GLM 5.2 model scored 39% F1 on IDOR detection in Semgrep's benchmarks, outperforming Claude Code (32%) at $0.17 per vulnerability. The model, released June 13, 2026, with MIT-li…
Semgrep's benchmark for AI-powered vulnerability detection shows its Semgrep Multimodal tool finds 3.5x more true positives than a tuned guided prompt at similar precision and lower cost per finding. …
A self-spreading npm worm called Miasma v2 compromised 57 packages across 286+ malicious versions by using a malicious binding.gyp file to trigger arbitrary code execution during npm install, without …