×
AI Agents Are Getting Better at Writing Code—and Hacking It as Well

AI Agents Are Getting Better at Writing Code—and Hacking It as Well

Tech-news , , , , , ,

The latest artificial intelligence models are not only remarkably good at software engineering—new research shows they are getting ever-better at finding bugs in software, too.

AI researchers at UC Berkeley tested how well the latest AI models and agents could find vulnerabilities in 188 large open source codebases. Using a new benchmark called CyberGym, the AI models identified 17 new bugs including 15 previously unknown, or “zero-day,” ones. “Many of these vulnerabilities are critical,” says Dawn Song, a professor at UC Berkeley who led the work.

Many experts expect AI models to become formidable cybersecurity weapons. An AI tool from startup Xbow currently has crept up the ranks of HackerOne’s leaderboard for bug hunting and currently sits in top place. The company recently announced $75 million in new funding.

Song says that the coding skills of the latest AI models combined with improving reasoning abilities are starting to change the cybersecurity landscape. “This is a pivotal moment,” she says. “It actually exceeded our general expectations.”

As the models continue to improve they will automate the process of both discovering and exploiting security flaws. This could help companies keep their software safe but may also aid hackers in breaking into systems. “We didn’t even try that hard,” Song says. “If we ramped up on the budget, allowed the agents to run for longer, they could do even better.”

The UC Berkeley team tested conventional frontier AI models from OpenAI, Google, and Anthropic, as well as open source offerings from Meta, DeepSeek, and Alibaba combined with several agents for finding bugs, including OpenHands, Cybench, and EnIGMA.

The researchers used descriptions of known software vulnerabilities from the 188 software projects. They then fed the descriptions to the cybersecurity agents powered by frontier AI models to see if they could identify the same flaws for themselves by analyzing new codebases, running tests, and crafting proof-of-concept exploits. The team also asked the agents to hunt for new vulnerabilities in the codebases by themselves.

Through the process, the AI tools generated hundreds of proof-of-concept exploits, and of these exploits the researchers identified 15 previously unseen vulnerabilities and two vulnerabilities that had previously been disclosed and patched. The work adds to growing evidence that AI can automate the discovery of zero-day vulnerabilities, which are potentially dangerous (and valuable) because they may provide a way to hack live systems.

AI seems destined to become an important part of the cybersecurity industry nonetheless. Security expert Sean Heelan recently discovered a zero-day flaw in the widely used Linux kernel with help from OpenAI’s reasoning model o3. Last November, Google announced that it had discovered a previously unknown software vulnerability using AI through a program called Project Zero.

Like other parts of the software industry, many cybersecurity firms are enamored with the potential of AI. The new work indeed shows that AI can routinely find new flaws, but it also highlights remaining limitations with the technology. The AI systems were unable to find most flaws and were stumped by especially complex ones.

Source link
#Agents #Writing #Codeand #Hacking

Tag

Related Posts

You know those little ADT security signs? You know, the ADT logo-emblazoned yard signs or stickers you find in front of houses or slapped on a window by the front door. Well, ADT is rethinking them: today, the home security company announced the ADT Live Light, a light-up version of its logo yard sign that will—you guessed it—shine when your ADT alarm system has been tripped. 

Besides being a visual indicator for your neighbors that something is amiss, ADT says the Live Light could be useful in helping first responders identify which house is yours. It would also serve the same purpose as the stickers and yard signs that came before it: letting would-be intruders know that they risk triggering an alarm by messing with your stuff. And while it can activate automatically, you can also turn it on using the ADT+ app if you want.

The Live Light is wireless and powered by three included AAA lithium batteries. It’s IP65-rated, meaning it should be dust-proof and resistant to water jets from any direction, and should operate in temperatures ranging from 4 to 122 degrees Fahrenheit. Both good things if you’re expecting people to leave their light-up sign out in the elements year-round (although those of us in the Midwest might want to bring it in for a couple of months in the winter). The sign itself is 10 x 10 inches tall and 1.75 inches thick, and goes into the ground with a 21-inch stake, although it can also be wall-mounted. 

The Live Light requires a $25-per-month ADT Professional Monitoring subscription and costs $50, including professional installation. There’s no option to install it yourself; ADT requires that one of its own installers carry out what doesn’t strike me as a terribly complicated procedure. (But what do I know? I’m just a little ol’ country technology reporter.)

Images showing the ADT My Safety feature in the ADT+ app.
© ADT

ADT also announced a new ADT+ app feature called My Safety. My Safety extends ADT’s subscriber service beyond your house by letting you do things like set a check-in timer that, if missed, will prompt ADT to contact emergency services for you. It also offers the manual options of speaking or texting with ADT agents, or setting an “Emergency Phrase” that lets you speak a custom phrase to summon help—that is, ADT will again contact emergency services for you. The company says subscribers will be able to use that last feature even if their phone isn’t in their hand, and I’ve asked exactly how that works.

For the My Safety feature, there’s no call history, and for subscriptions with multiple people on them, only the person who initiates a call with ADT monitoring will be able to see status, activity, alerts, and notifications. It’s nice to see the company has thought of that—it can be important for victims of abuse to be able to discreetly seek help. An ADT representative told Gizmodo via email that the ADT+ app update with My Safety is available now for all subscribers in the U.S., except in Milwaukee, WI.

#ADTs #Big #Idea #LightUp #ADT #Sign #YardADT,apps,Home security,Smart Home">ADT’s New Big Idea Is a Light-Up ADT Sign for Your Yard You know those little ADT security signs? You know, the ADT logo-emblazoned yard signs or stickers you find in front of houses or slapped on a window by the front door. Well, ADT is rethinking them: today, the home security company announced the ADT Live Light, a light-up version of its logo yard sign that will—you guessed it—shine when your ADT alarm system has been tripped.  Besides being a visual indicator for your neighbors that something is amiss, ADT says the Live Light could be useful in helping first responders identify which house is yours. It would also serve the same purpose as the stickers and yard signs that came before it: letting would-be intruders know that they risk triggering an alarm by messing with your stuff. And while it can activate automatically, you can also turn it on using the ADT+ app if you want. © ADT © ADT The Live Light is wireless and powered by three included AAA lithium batteries. It’s IP65-rated, meaning it should be dust-proof and resistant to water jets from any direction, and should operate in temperatures ranging from 4 to 122 degrees Fahrenheit. Both good things if you’re expecting people to leave their light-up sign out in the elements year-round (although those of us in the Midwest might want to bring it in for a couple of months in the winter). The sign itself is 10 x 10 inches tall and 1.75 inches thick, and goes into the ground with a 21-inch stake, although it can also be wall-mounted.  The Live Light requires a -per-month ADT Professional Monitoring subscription and costs , including professional installation. There’s no option to install it yourself; ADT requires that one of its own installers carry out what doesn’t strike me as a terribly complicated procedure. (But what do I know? I’m just a little ol’ country technology reporter.) © ADT ADT also announced a new ADT+ app feature called My Safety. My Safety extends ADT’s subscriber service beyond your house by letting you do things like set a check-in timer that, if missed, will prompt ADT to contact emergency services for you. It also offers the manual options of speaking or texting with ADT agents, or setting an “Emergency Phrase” that lets you speak a custom phrase to summon help—that is, ADT will again contact emergency services for you. The company says subscribers will be able to use that last feature even if their phone isn’t in their hand, and I’ve asked exactly how that works. For the My Safety feature, there’s no call history, and for subscriptions with multiple people on them, only the person who initiates a call with ADT monitoring will be able to see status, activity, alerts, and notifications. It’s nice to see the company has thought of that—it can be important for victims of abuse to be able to discreetly seek help. An ADT representative told Gizmodo via email that the ADT+ app update with My Safety is available now for all subscribers in the U.S., except in Milwaukee, WI. #ADTs #Big #Idea #LightUp #ADT #Sign #YardADT,apps,Home security,Smart Home

ADT Live Light, a light-up version of its logo yard sign that will—you guessed it—shine when your ADT alarm system has been tripped. 

Besides being a visual indicator for your neighbors that something is amiss, ADT says the Live Light could be useful in helping first responders identify which house is yours. It would also serve the same purpose as the stickers and yard signs that came before it: letting would-be intruders know that they risk triggering an alarm by messing with your stuff. And while it can activate automatically, you can also turn it on using the ADT+ app if you want.

The Live Light is wireless and powered by three included AAA lithium batteries. It’s IP65-rated, meaning it should be dust-proof and resistant to water jets from any direction, and should operate in temperatures ranging from 4 to 122 degrees Fahrenheit. Both good things if you’re expecting people to leave their light-up sign out in the elements year-round (although those of us in the Midwest might want to bring it in for a couple of months in the winter). The sign itself is 10 x 10 inches tall and 1.75 inches thick, and goes into the ground with a 21-inch stake, although it can also be wall-mounted. 

The Live Light requires a $25-per-month ADT Professional Monitoring subscription and costs $50, including professional installation. There’s no option to install it yourself; ADT requires that one of its own installers carry out what doesn’t strike me as a terribly complicated procedure. (But what do I know? I’m just a little ol’ country technology reporter.)

Images showing the ADT My Safety feature in the ADT+ app.
© ADT

ADT also announced a new ADT+ app feature called My Safety. My Safety extends ADT’s subscriber service beyond your house by letting you do things like set a check-in timer that, if missed, will prompt ADT to contact emergency services for you. It also offers the manual options of speaking or texting with ADT agents, or setting an “Emergency Phrase” that lets you speak a custom phrase to summon help—that is, ADT will again contact emergency services for you. The company says subscribers will be able to use that last feature even if their phone isn’t in their hand, and I’ve asked exactly how that works.

For the My Safety feature, there’s no call history, and for subscriptions with multiple people on them, only the person who initiates a call with ADT monitoring will be able to see status, activity, alerts, and notifications. It’s nice to see the company has thought of that—it can be important for victims of abuse to be able to discreetly seek help. An ADT representative told Gizmodo via email that the ADT+ app update with My Safety is available now for all subscribers in the U.S., except in Milwaukee, WI.

#ADTs #Big #Idea #LightUp #ADT #Sign #YardADT,apps,Home security,Smart Home">ADT’s New Big Idea Is a Light-Up ADT Sign for Your Yard

You know those little ADT security signs? You know, the ADT logo-emblazoned yard signs or stickers you find in front of houses or slapped on a window by the front door. Well, ADT is rethinking them: today, the home security company announced the ADT Live Light, a light-up version of its logo yard sign that will—you guessed it—shine when your ADT alarm system has been tripped. 

Besides being a visual indicator for your neighbors that something is amiss, ADT says the Live Light could be useful in helping first responders identify which house is yours. It would also serve the same purpose as the stickers and yard signs that came before it: letting would-be intruders know that they risk triggering an alarm by messing with your stuff. And while it can activate automatically, you can also turn it on using the ADT+ app if you want.

The Live Light is wireless and powered by three included AAA lithium batteries. It’s IP65-rated, meaning it should be dust-proof and resistant to water jets from any direction, and should operate in temperatures ranging from 4 to 122 degrees Fahrenheit. Both good things if you’re expecting people to leave their light-up sign out in the elements year-round (although those of us in the Midwest might want to bring it in for a couple of months in the winter). The sign itself is 10 x 10 inches tall and 1.75 inches thick, and goes into the ground with a 21-inch stake, although it can also be wall-mounted. 

The Live Light requires a $25-per-month ADT Professional Monitoring subscription and costs $50, including professional installation. There’s no option to install it yourself; ADT requires that one of its own installers carry out what doesn’t strike me as a terribly complicated procedure. (But what do I know? I’m just a little ol’ country technology reporter.)

Images showing the ADT My Safety feature in the ADT+ app.
© ADT

ADT also announced a new ADT+ app feature called My Safety. My Safety extends ADT’s subscriber service beyond your house by letting you do things like set a check-in timer that, if missed, will prompt ADT to contact emergency services for you. It also offers the manual options of speaking or texting with ADT agents, or setting an “Emergency Phrase” that lets you speak a custom phrase to summon help—that is, ADT will again contact emergency services for you. The company says subscribers will be able to use that last feature even if their phone isn’t in their hand, and I’ve asked exactly how that works.

For the My Safety feature, there’s no call history, and for subscriptions with multiple people on them, only the person who initiates a call with ADT monitoring will be able to see status, activity, alerts, and notifications. It’s nice to see the company has thought of that—it can be important for victims of abuse to be able to discreetly seek help. An ADT representative told Gizmodo via email that the ADT+ app update with My Safety is available now for all subscribers in the U.S., except in Milwaukee, WI.

#ADTs #Big #Idea #LightUp #ADT #Sign #YardADT,apps,Home security,Smart Home

TL;DR: Score a free iPhone 17e when signing up for a T-Mobile plan with no trade-in required. Alternatively, you can get the iPhone 17 for free from T-Mobile when signing up for an Experience More plan and trading in an eligible device.

In the mobile world, the word “free” is usually followed by a list of caveats that make you wish you never started looking for a deal. You usually need to sign up for the most expensive plan or trade-in a premium phone to get your hands on what you really want. But that’s not the case with the latest T-Mobile offer.

T-Mobile is offering a rare deal on the newly-released Apple iPhone 17e. For a limited time, you can pick up this A19-powered device for free by simply opening a new line.

You’ll need to activate a new line on T-Mobile’s Experience Beyond or Experience More plans to get the iPhone 17e for free. The phone’s full retail price is covered via 24 monthly bill credits, and since you aren’t trading in your old phone, you can keep it as a backup, give it to a kid, or sell it on a third-party site to actually make money on this deal.

Mashable’s Stan Shroeder got his hands on the iPhone 17e and said “The combination of having Apple’s latest chip and a decent amount of storage means this phone will be relevant for at least four to five years.” That’s an impressive lifespan for a budget-friendly phone, particularly when it’s free.

SEE ALSO: Apple’s iPhone Fold launch might happen later than we thought (updated)

If you need something a little more powerful, you can also pick up the iPhone 17 for free from T-Mobile when signing on for 24 months of an Experience More plan and trading in an eligible phone. That gets you unthrottled 5G data, 4K streaming, and enough international roaming for even the most adventurous of travellers.

It’s important to note that T-Mobile will charge taxes on these free deals and a $35 device connection fee. Is this really “free” when you need to sign up to something or pay an upfront fee? It’s a gray area — we’re doing our best, OK?

Score an iPhone 17 for free this week with T-Mobile.

#TMobile #giving #Apple #iPhone #free #claim">T-Mobile is giving away the Apple iPhone 17 for free — how to claim TL;DR: Score a free iPhone 17e when signing up for a T-Mobile plan with no trade-in required. Alternatively, you can get the iPhone 17 for free from T-Mobile when signing up for an Experience More plan and trading in an eligible device. In the mobile world, the word “free” is usually followed by a list of caveats that make you wish you never started looking for a deal. You usually need to sign up for the most expensive plan or trade-in a premium phone to get your hands on what you really want. But that’s not the case with the latest T-Mobile offer.T-Mobile is offering a rare deal on the newly-released Apple iPhone 17e. For a limited time, you can pick up this A19-powered device for free by simply opening a new line. You’ll need to activate a new line on T-Mobile’s Experience Beyond or Experience More plans to get the iPhone 17e for free. The phone’s full retail price is covered via 24 monthly bill credits, and since you aren’t trading in your old phone, you can keep it as a backup, give it to a kid, or sell it on a third-party site to actually make money on this deal. Mashable’s Stan Shroeder got his hands on the iPhone 17e and said “The combination of having Apple’s latest chip and a decent amount of storage means this phone will be relevant for at least four to five years.” That’s an impressive lifespan for a budget-friendly phone, particularly when it’s free. SEE ALSO: Apple’s iPhone Fold launch might happen later than we thought (updated) If you need something a little more powerful, you can also pick up the iPhone 17 for free from T-Mobile when signing on for 24 months of an Experience More plan and trading in an eligible phone. That gets you unthrottled 5G data, 4K streaming, and enough international roaming for even the most adventurous of travellers. Mashable Deals By signing up, you agree to receive recurring automated SMS marketing messages from Mashable Deals at the number provided. Msg and data rates may apply. Up to 2 messages/day. Reply STOP to opt out, HELP for help. Consent is not a condition of purchase. See our Privacy Policy and Terms of Use. It’s important to note that T-Mobile will charge taxes on these free deals and a device connection fee. Is this really “free” when you need to sign up to something or pay an upfront fee? It’s a gray area — we’re doing our best, OK?Score an iPhone 17 for free this week with T-Mobile. #TMobile #giving #Apple #iPhone #free #claim

free iPhone 17e when signing up for a T-Mobile plan with no trade-in required. Alternatively, you can get the iPhone 17 for free from T-Mobile when signing up for an Experience More plan and trading in an eligible device.

In the mobile world, the word “free” is usually followed by a list of caveats that make you wish you never started looking for a deal. You usually need to sign up for the most expensive plan or trade-in a premium phone to get your hands on what you really want. But that’s not the case with the latest T-Mobile offer.

T-Mobile is offering a rare deal on the newly-released Apple iPhone 17e. For a limited time, you can pick up this A19-powered device for free by simply opening a new line.

You’ll need to activate a new line on T-Mobile’s Experience Beyond or Experience More plans to get the iPhone 17e for free. The phone’s full retail price is covered via 24 monthly bill credits, and since you aren’t trading in your old phone, you can keep it as a backup, give it to a kid, or sell it on a third-party site to actually make money on this deal.

Mashable’s Stan Shroeder got his hands on the iPhone 17e and said “The combination of having Apple’s latest chip and a decent amount of storage means this phone will be relevant for at least four to five years.” That’s an impressive lifespan for a budget-friendly phone, particularly when it’s free.

SEE ALSO: Apple’s iPhone Fold launch might happen later than we thought (updated)

If you need something a little more powerful, you can also pick up the iPhone 17 for free from T-Mobile when signing on for 24 months of an Experience More plan and trading in an eligible phone. That gets you unthrottled 5G data, 4K streaming, and enough international roaming for even the most adventurous of travellers.

It’s important to note that T-Mobile will charge taxes on these free deals and a $35 device connection fee. Is this really “free” when you need to sign up to something or pay an upfront fee? It’s a gray area — we’re doing our best, OK?

Score an iPhone 17 for free this week with T-Mobile.

#TMobile #giving #Apple #iPhone #free #claim">T-Mobile is giving away the Apple iPhone 17 for free — how to claim

TL;DR: Score a free iPhone 17e when signing up for a T-Mobile plan with no trade-in required. Alternatively, you can get the iPhone 17 for free from T-Mobile when signing up for an Experience More plan and trading in an eligible device.

In the mobile world, the word “free” is usually followed by a list of caveats that make you wish you never started looking for a deal. You usually need to sign up for the most expensive plan or trade-in a premium phone to get your hands on what you really want. But that’s not the case with the latest T-Mobile offer.

T-Mobile is offering a rare deal on the newly-released Apple iPhone 17e. For a limited time, you can pick up this A19-powered device for free by simply opening a new line.

You’ll need to activate a new line on T-Mobile’s Experience Beyond or Experience More plans to get the iPhone 17e for free. The phone’s full retail price is covered via 24 monthly bill credits, and since you aren’t trading in your old phone, you can keep it as a backup, give it to a kid, or sell it on a third-party site to actually make money on this deal.

Mashable’s Stan Shroeder got his hands on the iPhone 17e and said “The combination of having Apple’s latest chip and a decent amount of storage means this phone will be relevant for at least four to five years.” That’s an impressive lifespan for a budget-friendly phone, particularly when it’s free.

SEE ALSO: Apple’s iPhone Fold launch might happen later than we thought (updated)

If you need something a little more powerful, you can also pick up the iPhone 17 for free from T-Mobile when signing on for 24 months of an Experience More plan and trading in an eligible phone. That gets you unthrottled 5G data, 4K streaming, and enough international roaming for even the most adventurous of travellers.

It’s important to note that T-Mobile will charge taxes on these free deals and a $35 device connection fee. Is this really “free” when you need to sign up to something or pay an upfront fee? It’s a gray area — we’re doing our best, OK?

Score an iPhone 17 for free this week with T-Mobile.

#TMobile #giving #Apple #iPhone #free #claim

Post Comment