Potentially Critical RCE Vulnerability in OpenSSL(research.jfrog.com)

6 points by beny23 8 months ago | 1 comments

We found 24 Android vulnerabilities using our open source AI security agent(github.blog)

6 points by fourfire 27 days ago | 2 comments

GitHub Blog post describing how GitHub's open source AI security agent and its taskflows found 24 Android app vulnerabilities, and how to run it yourself.

Claude Fable 5: mid-tier results on coding tasks(endorlabs.com)

373 points by bugvader 4 months ago | 217 comments

Endor Labs blog post benchmarking Claude Fable 5 on 200 real-world coding tasks for its Agent Security League, reporting middling functional and security results.

SQLite Critical CVEs or LLM Slop?(research.jfrog.com)

690 points by ymir_e 2 months ago | 342 comments

JFrog Security Research blog post examining whether recently published critical SQLite CVEs are real vulnerabilities or LLM-generated slop reports.

The Tokio/Rayon Trap and Why Async/Await Fails Concurrency(pmbanugo.me)

80 points by LAC-Tech 3 months ago | 50 comments

React2Shell and related RSC vulnerabilities threat brief(blog.cloudflare.com)

19 points by unknownhad 10 months ago | 1 comments