Skip to main content

Boffins Build Automated Android Bug Hunting System

6 days 23 hours ago
Researchers from Nanjing University and the University of Sydney developed an AI-powered bug-hunting agent that mimics human vulnerability discovery, validating flaws with proof-of-concept exploits. The Register reports: Ziyue Wang (Nanjing) and Liyi Zhou (Sydney) have expanded upon prior work dubbed A1, an AI agent that can develop exploits for cryptocurrency smart contracts, with A2, an AI agent capable of vulnerability discovery and validation in Android apps. They describe A2 in a preprint paper titled "Agentic Discovery and Validation of Android App Vulnerabilities." The authors claim that the A2 system achieves 78.3 percent coverage on the Ghera benchmark, surpassing static analyzers like APKHunt (30.0 percent). And they say that, when they used A2 on 169 production APKs, they found "104 true-positive zero-day vulnerabilities," 57 of which were self-validated via automatically generated proof-of-concept (PoC) exploits. One of these included a medium-severity flaw in an Android app with over 10 million installs.

Read more of this story at Slashdot.

BeauHD

Let us git rid of it, angry GitHub users say of forced Copilot features

1 week ago
Unavoidable AI has developers looking for alternative code hosting options

Among the software developers who use Microsoft's GitHub, the most popular community discussion in the past 12 months has been a request for a way to block Copilot, the company's AI service, from generating issues and pull requests in code repositories.…

Thomas Claburn

Anthropic Agrees To Pay Record $1.5 Billion To Settle Authors' AI Lawsuit

1 week ago
An anonymous reader quotes a report from Deadline: Anthropic has agreed to pay at least $1.5 billion into a class action fund as part of a settlement of litigation brought by a group of book authors. The sum, disclosed in a court filing on Friday, "will be the largest publicly reported copyright recovery in history, larger than any other copyright class action settlement or any individual copyright case litigated to final judgment," the attorneys for the authors wrote. The settlement also includes a provision that releases Anthropic only for its conduct up the August 25, meaning that new claims could be filed over future conduct, according to the filing. Anthropic also has agreed to destroy the datasets used in its models. The settlement figure amounts to about $3,000 per class work, according to the filing. You can read the terms of Anthropic's copyright settlement here (PDF). A hearing in the case is scheduled for Sept. 8.

Read more of this story at Slashdot.

BeauHD