#LLM SAST
80 related articles
·2 min
OpenAI Open-Sources Codex Security CLI: An AI-Powered Code Security Scanning Tool
OpenAI quietly open-sources Codex Security CLI, supporting repo security scanning, vulnerability tracking, fix verification, and CI/CD integration — extending AI from code generation into security.
Read more →
·3 min
U.S. Issues Evacuation Warnings to Citizens in Ten Countries: How Crisis Alert Technology Works
The U.S. government issued evacuation warnings to citizens in ten countries. This article analyzes how modern crisis warning systems work, from STEP push notifications to data-driven risk assessment and resilient emergency communication.
Read more →
·4 min
BB1 Robot News Reporter: Using AI to Combat Algorithmic Filter Bubbles
A developer spent years building BB1, a DIY robot news reporter using AI to surface humanitarian crises ignored by algorithms. Exploring filter bubbles, attention economics, and AI as counter-tool.
Read more →
·3 min
AI-Assisted Security Auditing: Finding 41 Vulnerabilities for $3,140 — A Practical Analysis
Analysis of an LLM-assisted security audit that found 41 vulnerabilities in GlobaLeaks for just $3,140, exploring AI security auditing's cost-effectiveness, methodology, and impact on open-source security.
Read more →
·2 min
Moving State Out of Framework Memory: A Multi-Agent Architecture Refactoring Guide
Exploring how 70% of multi-agent memory is consumed by non-reasoning state, and a refactoring approach using email threads to replace framework memory for better token efficiency, auditability, and resilience.
Read more →
·2 min
Google Releases Three New Gemini Models: Faster, Cheaper, and More Specialized
Google launches Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber—three new models targeting quality-cost balance, extreme affordability, and cybersecurity specialization for AI Agent use cases.
Read more →
·3 min
Numbat Open Source: A Cross-Framework AI Agent Security Detection and Response Solution Explained
Numbat is an open-source AI Agent security detection and response tool supporting cross-framework deployment with Agent behavior visibility and pre-execution interception capabilities.
Read more →
·2 min
CodeCrucible: A New Paradigm for LLM-Driven Static Code Security Analysis
Explore how CodeCrucible uses LLMs to revolutionize static code security analysis (SAST), comparing traditional tool limitations with semantic-driven vulnerability detection approaches.
Read more →
·2 min
CodeCrucible: A New Paradigm for LLM-Driven Static Code Security Analysis
Explore how CodeCrucible uses LLMs to revolutionize static code security analysis (SAST), comparing traditional tool limitations with semantic-driven vulnerability detection.
Read more →
·2 min
Agenta: A Detailed Look at the Open-Source Self-Hosted Claude Cowork Alternative
Agenta is an open-source AI Agent collaboration platform supporting self-hosted models and any Agent framework, positioned as an open-source Claude Cowork alternative.
Read more →
·4 min
Choosing the Wrong Agent Ruins Everything: Why the Same Model Can Perform Like Two Completely Different AIs
The same LLM API performs drastically differently under different Agent frameworks. Through a real database crash case, this article analyzes why choosing the right Agent matters more than switching models.
Read more →
·3 min
Ollama Prepares for Trillion-Parameter Open-Source Models as the Open-Source Ecosystem Heats Up
Ollama scales up for trillion-parameter open-source models like Kimi K3 and Qwen 3.8. Hugging Face demands $100M from OpenAI, Alibaba Coder goes mobile, and DeepSeek pauses fundraising.
Read more →
GitHub Daily · July 25: Where Decentra…
·2 min
GitHub Daily · July 25: Where Decentralized Communication Meets AI-Native Tools
GitHub Trending July 25: bitchat's Bluetooth Mesh chat gains 1,700 stars in a day, palmier-pro reimagines AI-native video editing, and aisuite unifies LLM access.
Read more →
·5 min
From Vibe Coding to AI Engineering: A Complete Guide to Enterprise-Grade Development
In the AI programming era, Vibe Coding alone can only build toys. This article deeply analyzes the complete engineering path from Vibe Coding to SDD spec-driven development, covering Claude Code and Codex tool selection, the SuperPower plugin, and domestic LLM comparisons.
Read more →
·7 min
Harness Engineering: Why a Powerful Model Isn't Enough — Here's What Really Matters
A data-deletion disaster reveals the biggest AI Agent risk: the problem isn't the model, it's Harness design. Learn context management, process standards, and permission isolation.
Read more →
Claude Is Mr. Meeseeks: The Disposable…
·2 min
Claude Is Mr. Meeseeks: The Disposable Nature of AI Agents and Its Engineering Implications
Using Rick and Morty's Mr. Meeseeks to explain Claude and AI agents: stateless execution, task atomicity, and multi-agent recursive failure risks. A deep dive for developers building better AI workflows.
Read more →
·5 min
AI Coding Getting Worse With Every Edit? Skills v1.1 Reveals the Real Cause and Solution
AI code getting messier with edits? The root cause isn't weak model capability but a lack of context and process. A deep dive into Matt Pocock's Skills v1.1: grilling, vertical-slice tickets, TDD, and WebFinder.
Read more →
Guided Generative Models: A New Approa…
·2 min
Guided Generative Models: A New Approach to Estimating Extreme Event Probabilities
Guided generative models use guidance sampling to extend generative AI into rare event probability estimation — covering financial risk, climate prediction, and engineering reliability.
Read more →
·6 min
GPT-5.6 vs Grok 4.5 on the Same Day: A Packed Week of Flagship AI Model Launches
OpenAI's GPT-5.6 launches with Sawa, Terra, and Luna sub-models the same day as Musk's Grok 4.5, while Anthropic, Meta, and NVIDIA make their moves. A packed week of flagship AI launches.
Read more →
·4 min
Superpowers: Enabling AI Agents to Truly Master Software Development Methodology
Superpowers is a trending GitHub project that builds an agentic skills framework with Shell scripts, injecting software engineering methodology into AI coding workflows. A deep dive into its architecture and value.
Read more →