Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۶:۱۴

Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws

Google’s Gemini 4 Carbon is a frontier AI model designed for software engineering and cybersecurity tasks, with safeguards built on those of its predecessor, Argon. SEC-bench Pro (Source: Google) Google says its teams have seen Carbon spend days investigating and fixing bugs across large codebases and low-level systems. The model was also trained to handle complex tasks and high-pressure situations. Finding and fixin…

Software Engineering & Testing

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۷:۴۰

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local file reached the computer behind the browser. Cursor ran attacker code, Copilot showed a fake address, and Codex, VS Code and Claude Desktop let a single local file read the rest of the disk. Two of those h…

Vulnerabilities & Zero-Day

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۷:۱۲

Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network

Volt Typhoon, a Chinese state-sponsored APT group that’s focused on cyberespionage and United States’ critical infrastructure, has been using a covert, constantly rotating relay network to hide its most sensitive intrusions, Lumen’s Black Lotus Labs revealed on Wednesday. This network, dubbed Silent Train by the researchers, consists of chains of compromised SOHO and IoT devices (e.g., TP-Link and Netgear routers) an…

IoT & OT Security Threat Intelligence

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۶:۴۲

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)

Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw. “Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS’s Thin Client Framework servlet that chains to remote code execution, this morning, Oct 27,” Defused posted on X, noting that no public report of the flaw being attempted in…

Vulnerabilities & Zero-Day Databases App & Web Security

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۵:۵۴

Ubuntu Core Desktop returns as Canonical’s plan for an immutable default desktop

Canonical has restarted work on Ubuntu Core Desktop, the immutable and attestable version of Ubuntu that the company says will over time become the default Ubuntu desktop. Jon Seager, Canonical’s VP of engineering, laid out the plan and admitted that the 2023 developer preview “fell short” of what the company had in mind. On Core Desktop, everything ships as a snap, Canonical’s sandboxed package format: the bootloade…

Operating Systems

منبع