Generative AI

They’re task-oriented and designed to carry them out without human input. The AI agents are coming.

Code scanning is one of the oldest appsec practices. In many cases, simple grep patterns and some fancy regular expressions are enough to find many of the obvious software mistakes. Scott Norberg shares his experience with encountering code scanners that didn't find the .NET vuln classes he needed to find and why that led him to creating a scanner ...

Speculative data flow attacks demonstrated against Apple chips with SLAP and FLOP, the design and implementation choices that led to OCSP's demise, an appsec angle on AI, updating the threat model and recommendations for implementing OAuth 2.0, and more!

Iran-backed groups were the most prolific adversarial users, while North Korean APTs used the LLM for likely IT worker scams.

AI agents and GenAI-driven fuzzing tools are already discovering flaws in open-source software.

Here are five ways we can respond to concerns around DeepSeek.

This week, we've added an extra news segment just on AI. Not because we wanted to, but because the news cycle has bludgeoned us into it. My mom is asking about Chinese AI, my neighbor wants to know why his stocks tanked, my clients want to know how to prevent their employees from using DeepSeek, it's a mess. First, a DeepSeek primer, so we can mak...

Illicit use of Google's generative artificial intelligence chatbot Gemini has been conducted by more than 57 state-backed advanced persistent threat groups across 20 countries, according to The Hacker News.