🐛 AFL - brownben

AI Code Sandboxes: A Comparative Security Study. Part 1 of 2 -- Engine-Level Properties (Attack Surface, Leakage, Stackability, CVE History, Patch Cadence, Fuzzing)

🐛fuzzing Academic

arxiv.org·

justhamade/triadjs: Triad is a TypeScript/Node.js framework where API specification, implementation, validation, and testing are a single source of truth.

🐛fuzzing Code

github.com··Hacker News

Humans in the LLM Loop

🐛fuzzing

derickrethans.nl··Hacker News

Property-based testing | Liam DeVoe

🔍Property Testing

tybug.dev··Hacker News

17 real security bugs in 10 weeks, all from an AI scanner

🐛fuzzing

lalitm.com··Lobsters

Learning Regular Languages with the TTT Algorithm

🐛fuzzing

rahul.gopinath.org··Lobsters, Hacker News

From $0 to $14,000: How a Blind SSRF in a PDF Generator Cracked a Corporate Internal Network

🐛fuzzing Blog

medium.com·

Anthropic’s too-scary-to-release AI hacking tool is actually coming out — kind of

🐛fuzzing

androidauthority.com·

C0XMO Botnet Spreads 👾, UniFi OS Auth Bypass 🔌, OpenAI Lockdown Mode 🔒

🌐Networking

tldr.tech·

With great AI power comes the need for zero trust responsibility

🐛fuzzing Blog

hashicorp.com·

Less-relevant results

I've spent enough time with this now in Claude Code (and Claude.ai and Claude Co...

🐛fuzzing Discussion

news.ycombinator.com··Hacker News

GapFuzz: Cross-Plane Divergence Fuzzing for Distributed SDN Controllers

🐛fuzzing Academic

arxiv.org·

skeeto/quilt.cpp: Quilt implemented in C++

🐛fuzzing Code

github.com··Hacker News

agentsploit/agentsploit: Offensive security framework for AI agents and MCP servers.

🐛fuzzing Code

github.com··Hacker News

eben-vranken/trusthook: 🪝 One-call webhook signature verification for any provider, with replay protection and zero dependencies.

🐛fuzzing Code

github.com··Hacker News, r/opensource

jdalang/jda-lang: Jda: A high-performance systems language bootstrapped from assembly. Beats C on sudoku & LZ77. Self-hosted compiler, no GC, built-in concurrency & ML.

🔀Concurrency Code

github.com··DEV

47 seconds of fuzzing in CI

The Firefox security harness that fixed 271 bugs no one had found for years

AI Code Sandboxes: A Comparative Security Study. Part 1 of 2 -- Engine-Level Properties (Attack Surface, Leakage, Stackability, CVE History, Patch Cadence, Fuzzing)

justhamade/triadjs: Triad is a TypeScript/Node.js framework where API specification, implementation, validation, and testing are a single source of truth.

Humans in the LLM Loop

Property-based testing | Liam DeVoe

17 real security bugs in 10 weeks, all from an AI scanner

Learning Regular Languages with the TTT Algorithm

From $0 to $14,000: How a Blind SSRF in a PDF Generator Cracked a Corporate Internal Network

Anthropic’s too-scary-to-release AI hacking tool is actually coming out — kind of

C0XMO Botnet Spreads 👾, UniFi OS Auth Bypass 🔌, OpenAI Lockdown Mode 🔒

With great AI power comes the need for zero trust responsibility

I've spent enough time with this now in Claude Code (and Claude.ai and Claude Co...

GapFuzz: Cross-Plane Divergence Fuzzing for Distributed SDN Controllers

skeeto/quilt.cpp: Quilt implemented in C++

agentsploit/agentsploit: Offensive security framework for AI agents and MCP servers.

eben-vranken/trusthook: 🪝 One-call webhook signature verification for any provider, with replay protection and zero dependencies.

jdalang/jda-lang: Jda: A high-performance systems language bootstrapped from assembly. Beats C on sudoku & LZ77. Self-hosted compiler, no GC, built-in concurrency & ML.