#code security
2375 related articles
·2 min
CodeCrucible: A New Paradigm for LLM-Driven Static Code Security Analysis
Explore how CodeCrucible uses LLMs to revolutionize static code security analysis (SAST), comparing traditional tool limitations with semantic-driven vulnerability detection approaches.
Read more →
·2 min
CodeCrucible: A New Paradigm for LLM-Driven Static Code Security Analysis
Explore how CodeCrucible uses LLMs to revolutionize static code security analysis (SAST), comparing traditional tool limitations with semantic-driven vulnerability detection.
Read more →
·2 min
OpenAI Open-Sources Codex Security Components: Setting a New Standard for AI Coding Safety
OpenAI open-sources Codex Security components, bringing automated security detection to AI code generation. Analysis of its strategic value, developer impact, and the industry shift from capability to security.
Read more →
·2 min
OpenAI Open-Sources Codex Security Components: Setting a New Standard for AI Coding Safety
OpenAI open-sources Codex Security components, bringing automated security detection to AI code generation. Analysis of its strategic significance and industry impact.
Read more →
·3 min
The Claude Code Covert Marking Controversy: How AI Coding Tools Are Reshaping Enterprise Security Boundaries
Claude Code was revealed to steganographically mark system prompts under specific conditions, triggering a developer trust crisis. This article analyzes the steganography, Anthropic's tightening China access, and how AI coding tools became a core enterprise security issue.
Read more →
·3 min
Anthropic's Project Glass Wing: The Arms Race in AI Code Security Auditing
Anthropic launches Project Glass Wing—its Mythos Preview model found over 10,000 critical infrastructure vulnerabilities in hours, spanning 150 organizations across 15 countries. A deep dive into AI security auditing.
Read more →
·3 min
Alibaba Bans Claude Code Company-Wide: Data Security Concerns Around AI Coding Tools
Alibaba has banned employees from using Claude Code company-wide, shifting sharply from encouragement to prohibition. An in-depth look at data security risks, privacy compliance dilemmas, and the domestic AI alternative trend.
Read more →
·6 min
Alibaba Bans Claude Code: The Battle Over AI Coding Tool Security and Data Sovereignty
Alibaba bans Claude Code over security risks, sparking tech community debate. An in-depth analysis of data leakage risks with cloud AI coding tools and the rise of local AI deployment.
Read more →
·6 min
Beware the Gemini Free Membership Scam: The Account Security Risks of Leaked Backup Codes
Exposing the phishing trap behind the "free Gemini Pro membership" tutorials circulating on video platforms: they lure users into handing over account passwords and backup recovery codes, leading to account theft. This article breaks down the process technically and teaches you to spot three danger signs.
Read more →
·2 min
GPT-5.6 Launches Three New Models; Claude Code Exposed to Potential Security Backdoor Risk
OpenAI launches GPT-5.6 with three models — Sol, Terra, and Luna — spanning flagship to economy tiers. Meanwhile, Claude Code is flagged for a potential code leak risk between April and June 2025.
Read more →
·2 min
The Security Risks of Running Unfamiliar Repos with Claude Code: How AI Agents Get Hijacked
Mozilla research reveals real attack chains targeting AI agent tools like Claude Code: malicious instructions hidden in DNS records bypass code scanning to steal API keys and cloud credentials.
Read more →
·6 min
Alibaba Bans Claude Code: The Enterprise Security Red Line for AI Coding Tools
In-depth analysis of Alibaba's comprehensive internal ban on Claude Code: from the hidden-marker controversy and Anthropic's regional-restriction stance to five core questions of enterprise AI coding tool security admission.
Read more →
·4 min
Alibaba Plans to Ban Claude Code: The Battle Between Backdoor Risks and Enterprise AI Security
Alibaba reportedly plans to ban Claude Code internally over backdoor and data leakage concerns. A deep dive into enterprise AI security, supply chain trust issues, and what it takes for AI tools to win enterprise adoption.
Read more →
·2 min
Devin Review Security Audit Feature Explained: How AI Code Review Detects Deep Security Vulnerabilities
Devin Review adds AI security audit to auto-detect auth bypasses, logic flaws & deep vulnerabilities in every PR, with full remediation from finding to fix.
Read more →
·1 min
v0 Introduces Permission Modes: Enhanced Security Controls for the AI Code Assistant
Vercel's AI coding tool v0 launches Permission Modes with three levels — Ask Every Time, Smart Judgment, and Free Execution — giving developers fine-grained control over AI operations.
Read more →
·3 min
Sonar Tests Code Quality Across 53 LLMs: Claude Has the Most Security Vulnerabilities, GPT-5 Code Volume Surges 5x
Sonar evaluates 53+ LLMs on 4,444 Java tasks: Claude has the highest security vulnerability density at 300/million lines, GPT-5 code volume surges 5x to 1.2M lines. Deep analysis of real-world code quality.
Read more →
Product Reviews·3 min
Codex Computer Use Hands-On Review: Setup Guide, How It Works, and Security Risks Explained
Hands-on review of OpenAI Codex Computer Use: step-by-step setup guide, WeChat demo, screenshot-based core principles, and analysis of three major security risks including privacy leakage and current limitations.
Read more →
Tutorials·3 min
Codex Security Guide: Five Key Principles for Permission Management
A detailed guide to OpenAI Codex permission management covering workspace setup, three permission modes, approval mechanisms, risk-level management, and five safety mantras for secure AI coding.
Read more →
Industry Insights·2 min
Claude Fixes More Firefox Security Bugs in One Month Than the Previous 15 Months Combined — AI Code Auditing Delivers Stunning Results
Using Anthropic's Claude Mythos Preview, Firefox fixed more security bugs in April 2025 than the previous 15 months. Explore how AI code auditing is revolutionizing browser and open-source security.
Read more →
·3 min
AI Agents Used for Automated Network Intrusion for the First Time: Technical Breakdown and Defense Insights
Deep technical breakdown of an AI Agent-driven intrusion at a frontier AI lab, covering the full attack timeline from reconnaissance to data exfiltration, plus defense strategies.
Read more →