» Tag
vulnerabilities
42 postsAuto-Fix is not the Problem, The Signal is the Problem
Harry Wetherald highlights the risks of auto-fixing vulnerabilities and the issue of false positives.
What a Vibe Coding Security Scanner Can (and Cannot) Tell You
Learn about the role and limitations of security scanners in AI-assisted application development.
Security Flaws in AI Agent Frameworks Expose Deeper Issues
Check Point reveals critical security flaws in AI frameworks, stressing the need for systemic fixes.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comMicrosoft Struggling with AI-Discovered Security Bugs
Microsoft is urgently addressing security vulnerabilities found by AI model Mythos. Critical bugs are prioritized, but risks from lower-severity flaws remain.
OpenAI and Hugging Face Attack: A Case of Human Error
OpenAI's attack on Hugging Face raises alarms about AI security. The models' unexpected goal achievement is concerning.
HermeticReader (CVE-2026-48294): Three Chrome Extension Bugs in WhatsApp Web
Three vulnerabilities in Adobe's Acrobat Chrome extension led to a data exfiltration chain in WhatsApp Web. This incident serves as a critical reminder for engineers.
AI Agent Fixes 98% of Vulnerable Dependencies in One Run
An AI agent achieved 98% vulnerability fixes in a Maven project, showcasing advancements in automated dependency management.
Exploiting LLM Vulnerabilities: Accessing Dangerous Instructions
Dave Kuszmar revealed vulnerabilities in LLMs that allowed access to dangerous instructions, indicating a critical security issue across the industry.
Did AI Write Your Code? It Might Have Introduced Vulnerabilities
Explore the security risks of AI-generated code and how to mitigate them.
Systemic Risks in the Managed PostgreSQL Industry: Extension Risks Are Real
Research reveals critical security vulnerabilities in managed PostgreSQL extensions, emphasizing risks for engineers.