Skip to main content

AI Can Find Hundreds of Software Bugs -- Fixing Them Is Another Story

3 months ago
Anthropic last week promoted Claude Code Security, a research preview capability that uses its Claude Opus 4.6 model to hunt for software vulnerabilities, claiming its red team had surfaced over 500 bugs in production open-source codebases -- but security researchers say the real bottleneck was never discovery. Guy Azari, a former security researcher at Microsoft and Palo Alto Networks, told The Register that only two to three of those 500 vulnerabilities have been fixed and none have received CVE assignments. The National Vulnerability Database already carried a backlog of roughly 30,000 CVE entries awaiting analysis in 2025, and nearly two-thirds of reported open-source vulnerabilities lacked an NVD severity score. The curl project closed its bug bounty program because maintainers could no longer handle the flood of poorly crafted reports from AI tools and humans alike. Feross Aboukhadijeh, CEO of security firm Socket, said discovery is becoming dramatically cheaper but validating findings, coordinating with maintainers, and developing architecture-aligned patches remains slow, human-intensive work.

Read more of this story at Slashdot.

msmash

Prediction Market Platform Kalshi Discloses First Insider Trading Enforcement Action

3 months ago
Kalshi, the prediction market platform regulated by the Commodity Futures Trading Commission, has for the first time publicly disclosed the results of an insider trading investigation, naming an editor for YouTube's biggest creator as the offender. The company identified Artem Kaptur, an editor for MrBeast, who it says traded around $4,000 on markets tied to the streamer and achieved "near-perfect trading success" on low-odds bets -- a pattern investigators flagged as suspicious. Kalshi froze Kaptur's account before he could withdraw any profits, fined him $20,000, suspended him for two years, and reported the case to the CFTC.

Read more of this story at Slashdot.

msmash

Orbital datacenters are a pie-in-the-sky idea: Gartner

3 months ago
Analyst firm bemoans ‘peak insanity’ among those who think circling servers can replace down-to-earth clouds

Analyst firm Gartner thinks talk of placing datacenters in space has reached “peak insanity,” because orbiting facilities can’t be run economically or satisfy demand for compute power on Earth.…

Simon Sharwood

LLMs killed the privacy star, we can't rewind, we've gone too far

3 months ago
You'll find these days that there's no hiding place

Add privacy to the list of potential casualties caused by the proliferation of AI, because researchers have found that large language models (LLMs) can be used to deanonymize internet users – even those who use pseudonyms – more efficiently than human sleuths.…

Thomas Claburn