#LLM code scanner
27 related articles
·3 min
AI-Powered Vulnerability Discovery in Practice: A Complete Guide to LLM Security Applications
A deep dive into LLM applications in cybersecurity offense and defense, covering AI code auditing, automated vulnerability discovery, CTF Agents, and more, with tool selection guides and compliance guidelines.
Read more →
·5 min
OpenAI Open-Sources Codex Security: An In-Depth Review of the AI Security Scanning Tool's Strengths and Limitations
In-depth analysis of OpenAI's open-source Codex Security code scanning tool, comparing it with Snyk, Semgrep, and CodeQL, examining its AI Agent verification, real test data, and current limitations.
Read more →
·2 min
Sentrint: A Security Scanner Built Specifically for AI-Generated Code
Sentrint is a security scanner designed for LLM-generated code, detecting secret leaks, hallucinated dependencies, and injection vulnerabilities in AI code.
Read more →
·3 min
LiteLLM Supply Chain Poisoning Incident: A Deep Dive into 40 Minutes of Full-Stack Credential Theft
Deep analysis of the LiteLLM PyPI supply chain poisoning: how a malicious .pth file silently stole API keys, cloud credentials, and SSH keys in 40 minutes, plus investigation and defense strategies.
Read more →
·4 min
Writing a macOS Driver for a Windows-Only Printer with Claude: AI Reverse Engineering in Practice
A developer used Claude to write a macOS driver for a Windows-only HP printer. This article analyzes AI's role in hardware reverse engineering and how LLMs lower the barrier to driver development.
Read more →
·4 min
Can AI Really Find Vulnerabilities While You Sleep and Earn Easy Money? The Truth About SRC Bug Bounties
Deep analysis of the viral "AI autopilot bug hunting for five-figure income" narrative, examining how SRC platforms actually work, AI's real role in vulnerability discovery, and the traffic schemes behind "packaged Skills."
Read more →
·3 min
Using DeepSeek to Write Game Cheats? A Technical Analysis of AI-Assisted Reverse Engineering
Technical analysis of how DeepSeek AI assists in game cheat development, from memory scanning to code generation, exploring AI's role in lowering coding barriers and its implications for game security.
Read more →
·3 min
AI Agents for Automated Vulnerability Discovery: A New Paradigm in Security Practice
An in-depth analysis of how AI Agents are reshaping vulnerability discovery, covering AI-powered bug hunting, code auditing, and CTF solving, plus AI security defense essentials.
Read more →
·3 min
AI Penetration Testing in Practice: Connecting Browser and Burp Suite via MCP Configuration Guide
Learn how to connect AI to Firefox browser and Burp Suite via MCP protocol for automated penetration testing, covering installation, JSON configuration, and practical tips.
Read more →
·5 min
The AI Agent Security Crisis: Why Generators Cannot Also Be Validators
Based on real data from Snyk's 4,800 enterprise customers, a deep analysis of three AI agent security pain points: automated attacks, untrusted outputs, and governance blind spots.
Read more →
·4 min
AI Agent Security: Snyk's Three Lines of Defense Against Database Deletion Disasters
AI Agents keep causing database deletions and data leaks. Snyk proposes three ADS defense lines: trusted code generation, supply chain protection, and behavioral governance using hooks and deterministic guardrails.
Read more →
·6 min
Separate Domains vs. Subdomains for Self-Hosted Services? A Deep Dive into Security Isolation Strategies
Deep dive into domain security architecture for self-hosted services: Should services with different exposure levels use separate domains or subdomains? Analysis of subdomain enumeration risks, defense in depth, and practical isolation strategies.
Read more →
·4 min
Building Self-Hosted Tunnels Under Extreme Censorship: A Layered Architecture with VLESS Reality
Deep analysis of building layered tunnel architectures using VLESS+Reality to evade DPI and domestic relays with whitelisted IPs to bypass geographic blocking in extreme censorship environments.
Read more →
·2 min
Agent Skill Hit Rate Dropping? 4 Methods to Solve the Skill Routing Problem
Skill hit rate dropping as your Agent scales? Learn how Progressive Disclosure works and explore 4 solutions: better descriptions, Skill Trees, negative samples, and recall + rerank.
Read more →
·5 min
Security Swarm Evaluation in Practice: Validating AI Security Tools with Real Vulnerabilities
A deep dive into Security Swarm's evaluation methodology: building test sets from real, recent vulnerabilities to avoid training data contamination and validate its ability to find more bugs at lower cost.
Read more →
·4 min
AI Coding Security: A CLI Tool Designed to Block Vulnerable Dependencies for Agents
AI coding assistants (Copilot/Cursor/Claude Code) frequently introduce vulnerable dependencies and hallucinate package names. This post analyzes an Agent-native CLI security tool and the shift-left security philosophy for AI-era supply chains.
Read more →
·4 min
12 Open-Source AI Agent Projects Worth Exploring: Frameworks, Skill Packs, and Toolchains
A roundup of 12 trending open-source AI agent projects on GitHub, covering video generation, agent frameworks, skill packs, code engines, security scanning, and voice processing.
Read more →
·3 min
Building an Automated Penetration Testing System with Claude: A Deep Dive into Memory, Skills, and Agent Architecture
A security researcher demonstrates how to customize Claude into an automated penetration testing system with memory, skills, and a knowledge base — successfully compromising CTF targets and finding real Bug Bounty vulnerabilities.
Read more →
·3 min
GitHub Daily · July 5: The Dual Narrative of Skill Ecosystem Explosion and Local-First AI
GitHub Trending July 5: Claude Code Skill ecosystem explodes, AI pen-testing tool Strix gains +2137 Stars, and local-first privacy apps surge.
Read more →
·4 min
AI Code Output Up 10x — How Do You Keep Code Review from Collapsing?
When AI code generation outpaces human review, Code Review becomes the biggest bottleneck. Learn guardrail systems, architecture constraint tests, and TDD-driven Agent development strategies.
Read more →