Dark Reading

Chinese LLMs Broaden the Gap Between Attackers & Defenders

Two new models from Chinese firms compete with top US mainstream and frontier models. Should cyber-defenders be worried?
Business Wire

AI-Generated Code Poses Major Security Risks in Nearly Half of All Development Tasks, Veracode Research Reveals

BURLINGTON, Mass.--(BUSINESS WIRE)--Veracode, a global leader in application risk management, today unveiled its 2025 GenAI Code Security Report, revealing critical security flaws in AI-generated code ...
CSOonline

Gen AI is transforming vulnerability hunting for pen-testers and attackers alike

Generative AI has had a significant impact on a wide variety of business processes, optimizing and accelerating workflows and in some cases reducing baselines for expertise. Add vulnerability hunting ...
Forbes

Why LLMs Aren't Ready For Predicting Vulnerability Exploitation

Large language models (LLMs) have demonstrated impressive capabilities in natural language understanding and automation, but our experience shows they are not yet suited for the specific, high-stakes ...
Hosted on MSN

Why LLMs are stalling out and what that means for software security?

Large language models have been pitched as the next great leap in software development, yet mounting evidence suggests their capabilities are flattening rather than accelerating. That plateau carries ...
Infosecurity-magazine.com

LLMs Fall Short in Vulnerability Discovery and Exploitation

Large language models (LLMs) are still falling short in performing vulnerability discovery and exploitation tasks. Many threat actors therefore remain skeptical about using AI tools for such roles.
CRN

Expansion Of Mythos-Level LLMs Makes Exploitability The Key Focus: CISO

The expected spread of frontier AI capabilities for vulnerability discovery such as Anthropic’s Claude Mythos means that organizations will need to prioritize patching based on the exploitability of ...
Morningstar

Simbian Publishes World’s First Cyber Defense Benchmark; Finds Frontier LLMs Alone Do Poor Job at Attack Discovery

Simbian®, the self-improving SecOps company, today announced formation of the Simbian Research Lab and released the Simbian Cyber Defense Benchmark to test large language models (LLMs) on detecting ...
CNBC

Some LLMs can find vulnerabilities in code, but that isn't stopping breaches, says CrowdStrike CEO George Kurtz

CrowdStrike Founder and CEO George Kurtz joins 'Mad Money' host Jim Cramer to talk the state of cybersecurity amid the war in Iran. Got a confidential news tip? We want to hear from you. Sign up for ...
InfoWorld

Three vulnerabilities in Anthropic Git MCP Server could let attackers tamper with LLMs

Threat actors could use prompt injection attacks to take advantage of three vulnerabilities in Anthropic’s official Git MCP server and cause mayhem with AI systems. This alert comes from researchers ...
VentureBeat

AI can fix bugs—but can’t find them: OpenAI’s study highlights limits of LLMs in software engineering

Large language models (LLMs) may have changed software development, but enterprises will need to think twice about entirely replacing human software engineers with LLMs, despite OpenAI CEO Sam ...