Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

The disbelief was palpable when Mozilla’s CTO last month declared that AI-assisted vulnerability detection meant “zero-days are numbered” and “defenders finally have a chance to win, decisively.” ...

The mean number of open-source vulnerabilities per codebase doubled in the past year, according to the annual Black Duck Open Source Software and Risk Analysis (OSSRA) report released Wednesday. The ...

AI vulnerability scanning is moving into developer workflows. Claude Security turns findings into prioritized fix guidance. The big challenge is keeping these tools from attackers. Anthropic has ...

OpenAI launched Codex Security on March 6, entering the application security market that Anthropic had disrupted 14 days earlier with Claude Code Security. Both scanners use LLM reasoning instead of ...

Chainguard will use AI to protect open-source code. Athena pools open-source users, developers, and maintainers. Others are ...

Unlike traditional SAST, code scanners or pen testers, Xint Code uses multi-LLM reasoning and orchestration for human-like contextual understanding, identification and prioritization of hidden ...

Every few weeks, I see the same thing happen. A major AI lab ships a new frontier model, the security industry erupts with headlines about autonomous vulnerability discovery and my inbox fills up with ...

AI-powered security tools are getting increasingly good at finding vulnerabilities, but a new Seattle startup is aiming to help software companies do the harder part: fixing them. Emphere announced $2 ...