#CVE scanning
58 related articles
·3 min
Ship Safe: A Deep Dive into the Open-Source Security Scanner for AI Coding Agents
Deep dive into how Ship Safe provides security scanning for AI coding agents, exploring agent security challenges, closed-loop feedback, and enterprise guardrails.
Read more →
·3 min
AI Hallucinations Fabricate Fake CVE Vulnerabilities: A New Challenge for Security Trust Systems
A fake critical SQLite CVE fabricated by AI hallucination passed official review, exposing weaknesses in vulnerability disclosure. Analysis of impacts and governance strategies.
Read more →
·2 min
OpenAI Open-Sources Codex Security CLI: An AI-Powered Code Security Scanning Tool
OpenAI quietly open-sources Codex Security CLI, supporting repo security scanning, vulnerability tracking, fix verification, and CI/CD integration — extending AI from code generation into security.
Read more →
·3 min
VulX Watch: A Standalone Security Audit Tool Built Specifically for AI-Generated Code
VulX Watch is a security audit tool for AI-generated code that connects read-only to GitHub repos, independently reviews vulnerabilities, and provides line-level evidence for every finding.
Read more →
·4 min
Strange URL Requests in Your NGINX Logs? Demystifying Automated Scanning Attacks and Defense Methods
Seeing unfamiliar 404 requests and strange URLs in your NGINX logs? This article explains automated scanning attacks—their origins, intent—and provides practical defenses using Fail2ban, CrowdSec, and more.
Read more →
·4 min
Mysterious URL Requests in NGINX Logs? Unmasking Automated Scanning Attacks and How to Defend Against Them
Seeing strange 404 requests and bizarre URLs in your NGINX access logs? Learn what automated scanning attacks are, where they come from, and how to defend with Fail2ban, CrowdSec, and other practical solutions.
Read more →
·3 min
AI-Assisted Security Auditing: Finding 41 Vulnerabilities for $3,140 — A Practical Analysis
Analysis of an LLM-assisted security audit that found 41 vulnerabilities in GlobaLeaks for just $3,140, exploring AI security auditing's cost-effectiveness, methodology, and impact on open-source security.
Read more →
·6 min
Securely Exposing Self-Hosted Services via VPS: Architecture & Practical Guide
Learn how to securely expose self-hosted services via VPS using WireGuard tunnels, Pangolin, and reverse proxies — enabling client-free access to Plex, Immich, and more while hiding your home IP.
Read more →
·5 min
Home Network Device Isolation: A Complete Guide to Safely Exposing Self-Hosted Services to the Internet
Learn how to safely expose self-hosted services to the internet using DMZ, VLAN isolation, and VM approaches while protecting your home network from attacks.
Read more →
·6 min
qsa.sh: Complete an External Server Security Scan with a Single curl Command
qsa.sh is a minimalist external server security scanning tool. Just run curl qsa.sh to get a port exposure and vulnerability report for your public IP in 30 seconds. Learn its technical architecture and pricing.
Read more →
·3 min
Taming Dependabot: Three Strategies to Reduce Noise Without Sacrificing Security
Learn GitHub's official Dependabot optimization strategies: grouped updates, slower cadence, and security fast lanes to reduce PR noise while keeping vulnerabilities fixed instantly.
Read more →
·2 min
CodeCrucible: A New Paradigm for LLM-Driven Static Code Security Analysis
Explore how CodeCrucible uses LLMs to revolutionize static code security analysis (SAST), comparing traditional tool limitations with semantic-driven vulnerability detection.
Read more →
·2 min
CodeCrucible: A New Paradigm for LLM-Driven Static Code Security Analysis
Explore how CodeCrucible uses LLMs to revolutionize static code security analysis (SAST), comparing traditional tool limitations with semantic-driven vulnerability detection approaches.
Read more →
·2 min
OpenAI Open-Sources Codex Security Components: Setting a New Standard for AI Coding Safety
OpenAI open-sources Codex Security components, bringing automated security detection to AI code generation. Analysis of its strategic value, developer impact, and the industry shift from capability to security.
Read more →
·2 min
OpenAI Open-Sources Codex Security Components: Setting a New Standard for AI Coding Safety
OpenAI open-sources Codex Security components, bringing automated security detection to AI code generation. Analysis of its strategic significance and industry impact.
Read more →
·3 min
Discovering Cryptographic Vulnerabilities with Claude: A New Paradigm for AI-Assisted Security Research
How Anthropic's Claude assists in discovering cryptographic implementation vulnerabilities, analyzing AI's real capabilities and limitations in code review, side-channel detection, and protocol analysis.
Read more →
·2 min
Gemini 3.5 Flash Cyber: Google's Lightweight Model Built for Cybersecurity
Google launches Gemini 3.5 Flash Cyber, a lightweight AI model built for cybersecurity teams focused on proactive vulnerability discovery and patching before exploitation.
Read more →
·3 min
Fast Remediation Replaces Zero Vulnerabilities: A New Trust Model for Software Security in the AI Era
In the AI era, zero vulnerabilities is unrealistic. Explore why fast remediation is becoming the new security trust model and how MTTR metrics are reshaping software supply chain security.
Read more →
·2 min
Rootless Containers: A Practical Guide to More Secure Service Deployment
A deep dive into Rootless Containers: technical principles, security advantages, and production practices. Learn how user namespaces and daemonless architecture reduce container escape risks.
Read more →
·2 min
Rootless Containers: A Practical Guide to More Secure Service Deployment
A deep dive into rootless containers: technical principles, security advantages, and production practices. Learn how user namespaces and daemonless architecture reduce container escape risks.
Read more →