code analysis

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos

AI, code analysis, Don't miss, GitHub, Hot stuff, News /

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos 2026-09-30 at 14:52 By Sinisa Markovic When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow Labs. Diagram showing how AI agents leak screenshots […]

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos Read More »

OWASP Noir: Open-source static analysis tool

code analysis, cybersecurity, Don't miss, GitHub, News, open source, OWASP, software /

OWASP Noir: Open-source static analysis tool 2026-09-30 at 08:30 By Anamarija Pogorelec OWASP Noir is an open-source static analysis tool that reads an application’s source code and lists the endpoints it exposes: paths, HTTP methods, parameters, headers, and cookies, each tied to the file and line it came from. Here’s where it gets useful. Shadow […]

OWASP Noir: Open-source static analysis tool Read More »

The AI code vulnerabilities that grow with your app

AI, automation, code analysis, cybersecurity, DevSecOps, Don't miss, News, report, Theori, vulnerability assessment /

The AI code vulnerabilities that grow with your app 2026-07-23 at 07:30 By Mirko Zorz Theori built 28 apps with AI coding agents and scanned each one through its pentesting platform. Five models did the building, split between Anthropic and OpenAI, across apps written from a spec, thrown together from a casual prompt, and rewritten […]

The AI code vulnerabilities that grow with your app Read More »

Google’s Gemini 3.5 Flash Cyber becomes a vulnerability hunter

agentic AI, AI, code analysis, cybersecurity, Google, News /

Google’s Gemini 3.5 Flash Cyber becomes a vulnerability hunter 2026-07-22 at 11:21 By Anamarija Pogorelec Google’s Gemini 3.5 Flash Cyber model finds, validates, and patches vulnerabilities before they can be exploited while helping mitigate broader misuse. It is part of a limited-access pilot program that will soon be available to governments and trusted partners through […]

Google’s Gemini 3.5 Flash Cyber becomes a vulnerability hunter Read More »

A forensic tool for backdoored code completions in AI assistants

AI, code, code analysis, Don't miss, LLMs, News, research /

A forensic tool for backdoored code completions in AI assistants 2026-07-20 at 08:00 By Sinisa Markovic Developers lean on AI coding assistants for a growing share of their daily work, letting the tools predict the next few lines and accepting many suggestions with a quick glance. Those tools learn from large collections of code, and […]

A forensic tool for backdoored code completions in AI assistants Read More »

Nika: Open-source code analysis tool

Application Security, code analysis, code review, Don't miss, GitHub, microservices, News, open source, scanner, software /

Nika: Open-source code analysis tool 2026-07-01 at 09:00 By Mirko Zorz Many serious security bugs in web applications sit across several files at once. Request data enters through a controller, moves through data objects and service layers, and turns dangerous only when it reaches a sensitive operation such as a database query or a file […]

Nika: Open-source code analysis tool Read More »

Senior engineers are spending their week cleaning up AI-generated code

AI, code, code analysis, DevOps, Don't miss, generative AI, Hot stuff, LLMs, New Relic, News, report /

Senior engineers are spending their week cleaning up AI-generated code 2026-06-15 at 07:00 By Anamarija Pogorelec At most U.S. technology companies, machines now write the bulk of the code that ships each week. The engineer’s job has shifted toward reviewing what the AI produces, and that review gives the code high marks. Leaders rate AI-generated […]

Senior engineers are spending their week cleaning up AI-generated code Read More »

The security questions around Chinese AI coding models in U.S. software

AI, Booz Allen Hamilton, China, code, code analysis, cybersecurity, LLMs, News, report, USA /

The security questions around Chinese AI coding models in U.S. software 2026-06-09 at 08:46 By Anamarija Pogorelec Software developers across the United States are using AI models built in China to write, debug, and review code, drawn by prices below those of American alternatives. These models carry risks for the security of American software, according […]

The security questions around Chinese AI coding models in U.S. software Read More »

What Mozilla learned running an AI security bug hunting pipeline on Firefox

AI, Anthropic, BH Consulting, Brian Honan, code analysis, Don't miss, Firefox, Hot stuff, Mozilla, News, strategy, tips /

What Mozilla learned running an AI security bug hunting pipeline on Firefox 2026-05-08 at 01:14 By Mirko Zorz Over the past several months, Mozilla ran an agentic harness powered by Claude Mythos Preview across Firefox’s source code, identifying 271 security bugs that were fixed in Firefox 150, with additional fixes shipped in versions 149.0.2 and […]

What Mozilla learned running an AI security bug hunting pipeline on Firefox Read More »

Can your coding style predict whether your code is vulnerable?

code analysis, cybersecurity, Don't miss, LLMs, News, research, software development /

Can your coding style predict whether your code is vulnerable? 2026-05-05 at 13:21 By Sinisa Markovic Developers leave fingerprints in the code they write. Naming choices, indentation patterns, preferred APIs, and the way someone structures a loop or handles a pointer all carry traces of individual habit. Researchers have used these stylistic signals for years […]

Can your coding style predict whether your code is vulnerable? Read More »

Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching

AI, Anthropic, ChatGPT, code analysis, News, OpenAI, patching /

Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching 2026-05-04 at 13:11 By Anamarija Pogorelec Claude Security, previously called Claude Code Security, is in public beta for Claude Enterprise customers. Available in Claude.ai, the capability scans codebases for security vulnerabilities and suggests targeted patches for review, helping teams identify and fix issues […]

Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching Read More »

AI SOC vendors are selling a future that production deployments haven’t reached yet

agentic AI, Artificial Intelligence, Aunoo AI, automation, CISO, Claude Code, code analysis, Cybanetix, Don't miss, Features, Gartner, generative AI, Hot stuff, LLMs, News, opinion, Reddit, report, security operations, SOC, strategy, Threat Intelligence /

AI SOC vendors are selling a future that production deployments haven’t reached yet 2026-03-26 at 12:32 By Mirko Zorz Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in analyst workload, and an accelerating path toward humanless operations. Practitioners buying and deploying those […]

AI SOC vendors are selling a future that production deployments haven’t reached yet Read More »

Anthropic cuts action approval loop, lets Claude Code make the call

Anthropic, Claude Code, code analysis, News /

Anthropic cuts action approval loop, lets Claude Code make the call 2026-03-25 at 11:06 By Sinisa Markovic Auto mode is a new permissions feature in the Claude Code system that allows the AI to make approval decisions on a user’s behalf while safeguards review actions before execution. The feature is available on Team plans and […]

Anthropic cuts action approval loop, lets Claude Code make the call Read More »

Bandit: Open-source tool designed to find security issues in Python code

code analysis, cybersecurity, DevSecOps, Don't miss, GitHub, News, open source, Python, scanning, software /

Bandit: Open-source tool designed to find security issues in Python code 2026-01-21 at 08:04 By Sinisa Markovic Bandit is an open-source tool that scans Python source code for security issues that show up in everyday development. Many security teams and developers use it as a quick way to spot risky coding patterns early in the […]

Bandit: Open-source tool designed to find security issues in Python code Read More »

BlueCodeAgent helps developers secure AI-generated code

Artificial Intelligence, code, code analysis, cybersecurity, LLMs, Microsoft, News, research /

BlueCodeAgent helps developers secure AI-generated code 2025-11-20 at 08:05 By Sinisa Markovic When AI models generate code, they deliver power and risk at the same time for security teams. That tension is at the heart of the new tool called BlueCodeAgent, designed to help developers and security engineers defend against code-generation threats. Why code generation […]

BlueCodeAgent helps developers secure AI-generated code Read More »

Metis: Open-source, AI-driven tool for deep security code review

Arm, Artificial Intelligence, code analysis, code review, Don't miss, GitHub, LLMs, News, open source, software /

Metis: Open-source, AI-driven tool for deep security code review 2025-11-19 at 08:06 By Anamarija Pogorelec Metis is an open source tool that uses AI to help engineers run deep security reviews on code. Arm’s product security team built Metis to spot subtle flaws that are often buried in large or aging codebases where traditional tools […]

Metis: Open-source, AI-driven tool for deep security code review Read More »

Chekov: Open-source static code analysis tool

cloud security, code analysis, cybersecurity, Don't miss, GitHub, News, open source, software /

Chekov: Open-source static code analysis tool 2025-10-02 at 09:18 By Sinisa Markovic Checkov is an open-source tool designed to help teams secure their cloud infrastructure and code. At its core, it’s a static code analysis tool for infrastructure as code (IaC), but it also goes a step further by providing software composition analysis (SCA) for […]

Chekov: Open-source static code analysis tool Read More »

A look inside 1,000 cyber range events and what they reveal about AppSec

code analysis, cybersecurity, News, report, survey /

A look inside 1,000 cyber range events and what they reveal about AppSec 2025-09-24 at 07:45 By Anamarija Pogorelec Software powers almost every part of business, which means attackers have more chances than ever to exploit insecure code. A new report from CMD+CTRL Security looks at how teams are building their defenses through cyber range […]

A look inside 1,000 cyber range events and what they reveal about AppSec Read More »

RIFT: New open-source tool from Microsoft helps analyze Rust malware

code analysis, Don't miss, GitHub, Malware, Microsoft, News, open source, rust /

RIFT: New open-source tool from Microsoft helps analyze Rust malware 2025-06-30 at 13:01 By Mirko Zorz Microsoft’s Threat Intelligence Center has released a new tool called RIFT to help malware analysts identify malicious code hidden in Rust binaries. While Rust is becoming more popular for its speed and memory safety, those same qualities make malware […]

RIFT: New open-source tool from Microsoft helps analyze Rust malware Read More »

Vulnerabilities found in NASA’s open source software

code analysis, Don't miss, Hot stuff, NASA, News, open source, ThreatLeap, vulnerability, vulnerability disclosure /

Vulnerabilities found in NASA’s open source software 2025-05-27 at 15:48 By Zeljka Zorz Vulnerabilities in open source software developed and used in-house by NASA could be exploited to breach their systems, claims Leon Juranić, security researcher and founder of cybersecurity startup ThreatLeap. The vulnerabilities Juranić, whose AppSec credentials include founding and leading DefenseCode, is no […]

Vulnerabilities found in NASA’s open source software Read More »

Scroll to Top