How we found 24 Android vulnerabilities using our open source AI security agent

<p>See how the open source projects in Session 4 of the GitHub Secure Open Source Fund combined AI-assisted workflows, maintainer expertise, GitHub security tools, expert

<p>In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Taskflow Agent AI framework. </p> <p>The post <a

<p>Learn to find and exploit real-world agentic AI vulnerabilities through five progressive challenges in this free, open source game that over 10,000 developers have already used

<p>Last week, Apple removed "Anything" from the App Store. The startup had raised $11M at a $100M valuation. Gone overnight.</p> <p>Replit and Vibecode are also blocked from

<p>Two independent security research groups published this week with findings that land on the same problem from different angles: AI agent skill files are a serious and

<p>Recently, mentions of Mythos from Anthropic leaked online - a model that found vulnerabilities even in OpenBSD. We thought this was a great moment to share our own developments

<p>There's a class of prompt injection attack that bypasses almost every AI firewall on the market — and it's sitting in the blind spot of your agentic stack right now.</p>