Cybersecurity teams competing in DARPA's Artificial Intelligence Cyber Challenge discovered over a dozen genuine software bugs while testing AI-powered vulnerability detection tools on 54 million lines of code.
In August, top cybersecurity firms gathered in Las Vegas for DARPA's AIxCC competition, where their automated tools scanned actual software code seeded with artificial vulnerabilities. The teams successfully identified most of the planted bugs, but their AI systems went further—uncovering more than a dozen real flaws that DARPA had not intentionally inserted.
The discovery demonstrates that AI-driven code analysis tools are maturing beyond test scenarios. Rather than merely finding expected vulnerabilities, these systems identified previously unknown security issues in legitimate software, suggesting practical value in automated security auditing.
The results highlight both the capabilities and evolving role of AI in cybersecurity. While script kiddies traditionally rely on pre-written exploits, these advanced tools represent a different threat landscape—one where automation can scale vulnerability discovery across massive codebases faster than human analysts.
Authorities have arrested two alleged members of TeamPCP, a hacking group responsible for infecting over 1,000 organizations through supply-chain attacks.
A Georgia police officer used Flock surveillance technology to track the movements of his ex-partner and another officer after their affair ended, according to internal investigation records.
McKesson, a major healthcare and pharmaceutical distributor, confirmed a cybersecurity incident involving unauthorized access to third-party applications. Extortion group ShinyHunters claims responsibility for stealing 284 million patient data records.
Fraudsters are exploiting Microsoft Teams and similar enterprise chat apps to deceive Chinese users into sending large sums of money. The trend has sparked a wave of complaints across the region.