ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “codemender”

2 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI industry 2
SeverityAllcritical 0high 0medium 0low 0info 2

Proactive cyber defense for governments and enterprises

Google launches the Fairwind Program giving governments and enterprises access to Gemini 3.8 Flash Cyber and CodeMender for autonomous vulnerability finding and patching.

Google DeepMind announced the Fairwind Program, a limited-access offering giving Google Cloud customers, government agencies, and cybersecurity partners access to Gemini 3.8 Flash Cyber and the CodeMender harness to autonomously find, verify, and fix vulnerabilities. Initial access prioritizes governments, critical infrastructure operators in healthcare, telecom, energy, and finance, and core technology platforms, with over 650 partners participating. Google also raised its total global cybersecurity funding commitment above $100 million, including $36 million for 35 US cyber clinics.

Google DeepMind · 14d agoAI industry

AI is adding to the review load on open-source projects, many of them thinly funded

ACM Technology Policy Council authors warn AI-generated code is overwhelming thinly funded open-source maintainers, raising software supply chain security risks.

Six authors including Simson Garfinkel and Josiah Dykstra, writing for the ACM Technology Policy Council, argue AI coding tools flood open-source projects with contributions that human maintainers must still review. They cite Google's CodeMender agent contributing 72 security fixes to open-source projects, some as large as 4.5 million lines of code, between April and October 2025. Funding is lopsided: the Linux Foundation raised $292,217,236 in 2024 versus $2,379,402 for the Apache Software Foundation. They also note most open-source applications still ship no SBOM despite US and EU mandates, and attackers increasingly plant malicious packages in popular repositories.

Help Net Security · 3h agoAI industry