Also I'd be remiss if I didn't mention that the same researchers who got these results are the same ones working on Xint's commercially available AppSec harness - so you're basically getting the mind of the world's best offensive security researchers to secure your own applications for much much much less cost

#Pwn2Own Ireland schedule is finalized. Team Xint attempts (Ireland time): LiteLLM - Tuesday 9:30 Philipps Hue - Tuesday 18:30 Home Assistant - Wednesday 9:30 Oracle AI Database - Wednesday 11:45 Pixel 10 - Thursday 11:15 zerodayinitiative.com/blog/2…

🚨 new Xint research 🚨 Previous studies have demonstrated that AI-generated code tends to have more flaws, but we looked at what specific **types** of flaws AI is prone to producing and why. What we found is helpful for dev and prodsec so they know what to look for when reviewing AI code. Great work from Xint researcher @junorouse and in addition to these findings his methodology is worth taking a look at as well: To get this level of contextual analysis for a single code base would have taken weeks for even a team of experienced pentesters. But to do so across 28 different codebases in less than a week was practically impossible until a platform like Xint came along that can not only analyze every single line of code like a human pentester across millions of lines of code in just hours, but also Xint was able to de-duplicate over 8,800 findings into just 500+ unique findings, and then validate down to just ~430 true positives that it then automatically categorized and scored. go.xint.io/the-top-security-…

🚨 Have you been interested in the quality of Xint results but needed a one-time scan of a single live application (for example, for a one-time compliance scan of a vendor) instead of a longer-term commitment for several apps, servers, and APIs? Get on the waitlist for Xint Pulse - coming soon! xint.io/pulse-waitlist

Patch your Linux boxes! Copy.Fail is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms. Found by the teams at @theori_io and @xint_official More details below xint.io/blog/copy-fail-linux…

'Before [Xint security researcher @tjbecker] started working on automatic bug finding with AI, he worked on vulnerability research, finding zero days and reporting them to maintainers. He said it used to take him weeks or months to find a high-impact vulnerability in a brand-new codebase, and now it only takes hours. “I just drop the code into our AI bug-finding tool [Xint] and in a couple hours I get a report with a bunch of candidate vulnerabilities, and most of them end up checking out and being real issues,” he said. “The bar to diving into a new million-line codebase and finding a bug is so much lower than it used to be.”' Great report from @verge looking into the new era of cybersecurity, where even non-technical attackers can use AI to find the weaknesses in the apps and networks of organizations faster and at a scale never thought possible before. theverge.com/ai-artificial-i…

Join award-winning security researcher @tylerni7 on @TechstrongTV for this hands-on workshop for product security practitioners. In this workshop he will: 1) go deep into how AI-native AppSec differs from traditional tools and methods 2) share the pitfalls of poorly harnessed AI bug finding 3) and provide a demonstration of how the scaffolding (and not the model) is what will provide superior results for what product security looks like in the real world webinars.techstronglearning.…