… We’re told the two organizations “work directly with maintainers and their communities to make emerging security capabilities accessible, practical, and aligned with existing project workflows.” Further: “The effort will support sustainable strategies that help maintainers manage growing security d… …
… In October, we learned that other Beijing crews – including Salt Typhoon – also joined in the attacks. ® security microsoft cybersecurity and infrastructure security agency cybercrime cyber-crime
Security Cryptographers engage in war of words over RustSec bug reports and subsequent ban Rust security maintainers contend Nadim Kobeissi's vulnerability claims are too much UPDATED Since February, cryptographer Nadim Kobeissi has been trying to get code fixes applied to Rust cryptography librari… …
… "We expect that a significant share of the world's code will be scanned by AI in the near future, given how effective models have become at finding long-hidden bugs and security issues." To highlight Claude Code Security's bug hunting potential, the company pointed to how its red team had used Clau… …
… On the other hand, as long-term Linux kernel maintainer Greg Kroah-Hartman told us recently, AI security bug reports suddenly went from slop to useful . OK, let's say that even in early beta, Mythos is that good at finding bugs. What will that mean? Well, next we need someone to fix those bugs. …
… MORE CONTEXT Anthropic: All your zero-days are belong to Mythos AI has gotten good at finding bugs, not so good at swatting them Azure issues not adequately fixed for months, complain bug hunters Zombie Microsoft bugs rise from the dead, pave way for crims and ransomware scum While CVE-2026-32201 i… …
… The latter had been exploited as a zero-day for months , and Adobe finally released a patch over the weekend. ® security patches patch management microsoft cybersecurity and infrastructure security agency cybercrime
… "The 40 break down across three distinct credit attributions: the core Anthropic research team, Nicholas Carlini individually, and Calif.io, an independent security research firm running a program called MADBugs Month of AI-Discovered Bugs that credits their work jointly as 'Calif.io in collaborati… …
… "To be clear, the exploit that Claude wrote only works within a testing environment that intentionally removes some of the security features of modern web browsers," explained security researchers Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman in a blog post . …
… Even if the reports are better, the issues being identified aren't necessarily security flaws that can be exploited and need to be corrected. …