#vulnerability discovery
146 related articles
Tutorials·3 min
AI Penetration Testing in Practice: Comparing Three Agent Tools with DeepSeek for Vulnerability Discovery
Hands-on comparison of Claude Code, Codex, and DeepSeek TUI for AI-assisted penetration testing with DeepSeek V4 Pro, covering vulnerability discovery, WebShell upload, and intranet penetration.
Read more →
Tech Frontiers·1 min
Open-Source Replication of Anthropic Mythos: Autonomous Vulnerability Discovery Framework Analysis
Analysis of mythos-research, an open-source replication of Anthropic's Mythos Preview autonomous vulnerability discovery framework using Claude Opus 4.7.
Read more →
Research·1 min
GPT-5.5 Cybersecurity Capability Assessment: UK AISI Reveals AI Vulnerability Discovery Capabilities Now Open to the Public
UK AISI evaluates OpenAI GPT-5.5's cybersecurity capabilities, finding vulnerability discovery on par with Claude Mythos — but now publicly available, raising AI safety governance concerns.
Read more →
Third-Party Cybersecurity Evaluations …
·2 min
Third-Party Cybersecurity Evaluations of OpenAI Models: A Deep Dive into Methodology and Industry Impact
An in-depth analysis of third-party cybersecurity evaluation methodologies for OpenAI models, covering red teaming, vulnerability discovery assessment, risk classification, and impact on AI governance.
Read more →
·3 min
AI Hallucinations Fabricate Fake CVE Vulnerabilities: A New Challenge for Security Trust Systems
A fake critical SQLite CVE fabricated by AI hallucination passed official review, exposing weaknesses in vulnerability disclosure. Analysis of impacts and governance strategies.
Read more →
·3 min
Nightcrawler: Deep Dive into an AI Penetration Testing Agent Running Locally on Smartphones
Deep analysis of Nightcrawler, an AI penetration testing agent running entirely on smartphones. Exploring how on-device AI empowers cybersecurity testing, its architecture, use cases, and risks.
Read more →
·3 min
VulX Watch: A Standalone Security Audit Tool Built Specifically for AI-Generated Code
VulX Watch is a security audit tool for AI-generated code that connects read-only to GitHub repos, independently reviews vulnerabilities, and provides line-level evidence for every finding.
Read more →
·2 min
Chrome Fixes More Vulnerabilities in One Month Than the Previous Two Years Combined — How AI Is Reshaping the Security Landscape
Google used AI to fix more Chrome vulnerabilities in one month than the previous two years combined. Explore how AI-driven fuzzing and automated patching are reshaping browser security.
Read more →
·2 min
Chrome Fixes More Vulnerabilities in One Month Than the Previous Two Years Combined — How AI Is Reshaping the Security Landscape
Google used AI to fix more Chrome vulnerabilities in one month than the previous two years combined. Explore how AI-driven fuzzing and automated patching are reshaping browser security.
Read more →
·2 min
AI Delivers: Chrome Fixes More Vulnerabilities in One Month Than the Previous Two Years Combined
Google used AI to fix 1,072 Chrome vulnerabilities in one month, surpassing two years of fixes. Deep dive into AI-enhanced fuzzing and the security arms race.
Read more →
·3 min
AI Cybersecurity Assessment: Capability Boundaries Revealed by Three Real-World Attack Incidents
Analysis of three real cyberattack incidents reveals AI's actual capability boundaries in offensive operations, exposing gaps between lab benchmarks and real-world threats for better security assessment.
Read more →
·3 min
AI Cybersecurity Assessment: Capability Boundaries Revealed by Three Real-World Attack Incidents
Investigating three real cyberattack incidents to analyze AI's true role in offensive operations, examining the gap between lab assessments and real threats for better AI security evaluation.
Read more →
·4 min
Mysterious URL Requests in NGINX Logs? Unmasking Automated Scanning Attacks and How to Defend Against Them
Seeing strange 404 requests and bizarre URLs in your NGINX access logs? Learn what automated scanning attacks are, where they come from, and how to defend with Fail2ban, CrowdSec, and other practical solutions.
Read more →
·3 min
AI-Assisted Security Auditing: Finding 41 Vulnerabilities for $3,140 — A Practical Analysis
Analysis of an LLM-assisted security audit that found 41 vulnerabilities in GlobaLeaks for just $3,140, exploring AI security auditing's cost-effectiveness, methodology, and impact on open-source security.
Read more →
·6 min
Securely Exposing Self-Hosted Services via VPS: Architecture & Practical Guide
Learn how to securely expose self-hosted services via VPS using WireGuard tunnels, Pangolin, and reverse proxies — enabling client-free access to Plex, Immich, and more while hiding your home IP.
Read more →
·6 min
qsa.sh: Complete an External Server Security Scan with a Single curl Command
qsa.sh is a minimalist external server security scanning tool. Just run curl qsa.sh to get a port exposure and vulnerability report for your public IP in 30 seconds. Learn its technical architecture and pricing.
Read more →
·3 min
Cynative Open-Source AI Cloud Security Tool: Audit Cloud Infrastructure with Natural Language
Cynative is an open-source AI cloud security auditing tool that lets you query AWS, GCP, Azure, and Kubernetes infrastructure using natural language. Its read-only architecture ensures zero risk to production environments.
Read more →
·3 min
Cynative Open-Source AI Cloud Security Tool: Audit Cloud Infrastructure with Natural Language
Cynative is an open-source AI cloud security tool that lets you audit AWS, GCP, Azure, and Kubernetes infrastructure using natural language. Its read-only architecture ensures production environments stay safe.
Read more →
·2 min
Google Releases Three New Gemini Models: Faster, Cheaper, and More Specialized
Google launches Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber—three new models targeting quality-cost balance, extreme affordability, and cybersecurity specialization for AI Agent use cases.
Read more →
·3 min
The Open-Weight Model Alliance: The Dual Game of AI Safety and American Competitiveness
Analysis of how the open-weight model alliance serves both digital safety and U.S. competitiveness, exploring transparency, ecosystem building, and geopolitical AI competition.
Read more →