vulnerability scanning
17 articles about vulnerability scanning in AI news
Google Open-Sources OSV-Scanner: AI-Powered Dependency Vulnerability Scanner
Google has open-sourced OSV-Scanner, a vulnerability scanner that maps project dependencies against the OSV database across 11+ ecosystems. It features guided remediation and call analysis to reduce false positives.
Vulnetix VDB: Live Package Security Scanning Inside Claude Code
A new MCP server, Vulnetix VDB, provides real-time security scanning for package dependencies within Claude Code, helping developers catch vulnerabilities as they write code.
OpenAI Launches Codex Security: AI-Powered Vulnerability Scanner That Prioritizes Real Threats
OpenAI has unveiled Codex Security, an AI agent designed to scan software projects for vulnerabilities while intelligently filtering out false positives. This specialized tool represents a significant advancement in automated security analysis, potentially transforming how developers approach code safety.
OpenAI GPT-5.5-Cyber Beats Anthropic Mythos on Security Benchmarks
OpenAI's GPT-5.5-Cyber beats Anthropic's Mythos on security benchmarks. Updated Codex plugin auto-patches after scanning 30M commits.
Simon Willison's 'scan-for-secrets' CLI Tool Detects API Keys in Logs
Simon Willison built 'scan-for-secrets', a Python CLI tool for scanning log files for accidentally exposed API keys. It's a lightweight utility for developers to sanitize data before sharing.
Anthropic Deploys Claude Mythos 5 in Cyber Defense Scanner Beta
Anthropic deployed Claude Mythos 5 in its Claude Security scanner, now in public beta for Enterprise customers. The move gates its most capable model to defensive use with human approval required for every patch.
Claude Security Public Beta Launches in Claude Code on Web
Anthropic launched Claude Security in public beta for Claude Code on web, letting developers validate and fix vulnerabilities without leaving the editor.
Google DeepMind Maps AI Attack Surface, Warns of 'Critical' Vulnerabilities
Google DeepMind researchers published a paper mapping the fundamental attack surface of AI agents, identifying critical vulnerabilities that could lead to persistent compromise and data exfiltration. The work provides a framework for red-teaming and securing autonomous AI systems before widespread deployment.
Keygraph's Shannon AI Pentester Hits 96.15% on XBOW, Finds Real Exploits
Keygraph released Shannon, a fully autonomous AI pentester that hunts real exploits in source code with a 96.15% success rate on the hint-free XBOW Benchmark. It runs a full test in about an hour for roughly $50 using Claude Sonnet.
Axios Supply Chain Attack Highlights AI-Powered Social Engineering Threat to Open Source
The recent Axios npm package supply chain attack was initiated by highly sophisticated social engineering targeting a developer. This incident signals a dangerous escalation in the targeting of open source infrastructure, where AI tools could amplify attacker capabilities.
Strix Open-Source Tool Finds 600+ Vulnerabilities in AI-Generated Code by Simulating Attacker Behavior
Strix, an open-source security tool, dynamically probes running applications for business logic flaws that traditional testing misses. It found 600+ verified vulnerabilities across 200 companies, addressing critical gaps in AI-driven development workflows.
How to Configure Claude Code's Sub-Agent Orchestration for Parallel, Sequential, and Background Work
Add routing rules to your CLAUDE.md to make your central AI delegate tasks intelligently—parallel for independent domains, sequential for dependencies, background for research.
GitHub MCP Server Now Scans for Secrets in Claude Code — Here's How to Use It
The GitHub MCP Server can now scan your code changes for exposed secrets before you commit, preventing credential leaks directly in your Claude Code workflow.
New AI Framework Uses Diffusion Models to Authenticate Anti-Counterfeit Codes
Researchers propose a novel diffusion-based AI system to authenticate Copy Detection Patterns (CDPs), a key anti-counterfeiting technology. It outperforms existing methods by classifying printer signatures, showing resilience against unseen counterfeits.
Open-Source AI Agent Revolutionizes Error Monitoring, Cuts Downtime by 95%
A new open-source AI agent autonomously scans production logs, identifies root causes of errors, and delivers contextual alerts via Slack before engineers notice issues. The tool reportedly reduces production downtime by 95%, transforming traditional debugging workflows.
The Silent Revolution: How AI Code Reviewers Are Earning Trust Through Real-World Validation
AI-powered code review systems are undergoing continuous validation through thousands of daily developer actions in open-source repositories. Each time a developer fixes a bug flagged by AI, it serves as an independent vote of confidence in the system's accuracy.
AI Agents Master Smart Contract Hacking: OpenAI's EVMbench Reveals Autonomous Exploitation Capabilities
OpenAI and Paradigm have developed EVMbench, a benchmark showing AI agents can autonomously exploit most Ethereum smart contract vulnerabilities. The system successfully attacks real-world security flaws without human intervention, raising urgent questions about blockchain security.