Six of Six on Known-Vulnerable Commits Is a Recall Test
Cycode's agentic scanner found every published CVE in a ten-repository benchmark it designed. The false positive rate, w...
ASEAN edition · Wed, 9 Sep 2026 · Signal over noise
AI-curated tech news, ASEAN business intelligence, and cybersecurity updates — written for the region.
Cycode's agentic scanner found every published CVE in a ten-repository benchmark it designed. The false positive rate, w...
933 contributors, 569 of them new to the codebase, and 16,000 merges in a cycle the project says outgrew its own release...
A University of Virginia team reproduced 35 ICSE 2026 techniques and outperformed 37 to 63 per cent of them with a singl...
VulnCheck has recorded 360 attacks on a Langflow flaw fixed in January. It is the sixth separately identified Langflow v...
A reproducible build proves the binary matches the source. It says nothing about whether the source is safe, which is wh...
Every product of this reach reports monthly active users because every product of this reach phones home. VLC cannot, so...
The limitations are in the project's own documentation, which is to its credit. The difficulty is the gap between someon...
Two very different promises sit in one announcement: doing a stated job on projects Broadcom owns, and republishing hard...
Most WordPress advisories describe flaws that need an account first. These five do not, which is what a 9.8 is actually...
The headlines read as backing from Shopify, Stripe, Dell and Cloudflare. Those companies have funded nothing. Ten indivi...
Every headline reads as a permission being granted. The resolution declines to take a position at all, then adds a hard...
Respondents were screened for existing agent use, so the number measures intensity among adopters rather than adoption a...
Apache 2.0 covers the control stack, the pipeline and all seven shipped policies. The reward functions, domain-randomisa...
The licence matters more than the benchmark: no field-of-use restriction, an explicit patent grant, and nothing leaves y...
The project stays MIT-licensed under an independent foundation, and the people who set its technical direction now work...
GitHub's incident summary puts the 17 August outage at 13:28 to 21:15 UTC, not the three hours most people saw. A latent...
Slack Code gives an assignment its own channel, with Claude Code, Devin, Copilot and Vercel's agent working where collea...
Kitesurf runs in V8 isolates on Workers with no Chromium underneath, claims 3 to 7 times less CPU and memory for agent t...
DeepMind priced Nano Banana 2 Lite at US$0.034 per 1,000 images and Gemini Omni Flash at US$0.10 per second of video. On...
OpenRouter routes enterprise work across about 400 models and meters the token spend. A payments company buying it makes...
Warp Factories triages, specs, implements, reviews and verifies, with a different model allowed at every stage. That rel...
The CS-4 packs three WSE-3 Turbo wafers and 750 petaflops into one rack. The qualifier in the headline claim is per user...
The largest startup acquisition on record was paid entirely in SpaceX stock, and Cursor now sits inside a new SpaceXAI d...
CVE-2026-19478 needs no credentials and no user interaction, and its headline capability is destruction rather than thef...