According to the article, the use of AI coding tools has led to a significant increase in software vulnerabilities, with incidents per pull request rising 23.5% and change failures increasing 30% year…
A security researcher used the AI-native tool Xint Code to scan the entire CPython source code, which identified a critical vulnerability (CVE-2026-6100) in the tarfile module within 30 minutes. The b…
Xint's article explains that AI-native code scanners face unpredictable costs because linear increases in code lines can cause exponential increases in token consumption, making it difficult for secur…
Business logic vulnerabilities are security flaws that arise not from coding errors, but from the abuse of legitimate system workflows, where each individual request appears normal but violates the in…
Xint Code is a new AI-powered code analysis tool that autonomously discovered critical zero-day remote code execution (RCE) vulnerabilities in Redis, PostgreSQL, and MariaDB without any human interven…
Theori's open-sourced Cyber Reasoning System (CRS) called RoboDuck, developed for DARPA's AI Cyber Challenge (AIxCC). The system uniquely uses an "LLM-first" approach to find bugs and generate Proofs …
Strategies for building effective LLM agents for the AI Cyber Challenge (AIxCC), where teams create autonomous Cyber Reasoning Systems (CRS) to find and patch vulnerabilities. The authors advocate for…