DirectDefense CSO lists ten long-horizon software security practices
Walcutt says his research found 44% of AI-generated coding tasks introduced a known vulnerability.
1
Stories per day · 30 days
8 stories, newest first · one card per story
Stories tagged #software-security
AI vulnerability patching has a grading problem
Northwestern researchers found AI vulnerability patches often stop crashes yet fail the maintainers' own tests.
6
Beyond FAIR: A Fitness Function Framework for Sustainable Research Software
Authors add environmental and security fitness functions to FAIR-based research-software sustainability checks.
Security Is More Than a Library Call: How Security Features Live in Code
A Java mining study finds 561 security features are large, scattered, and tangled beyond library calls.
TraceVIC: Causal Reasoning over Code Evolution for Identifying Vulnerability-Inducing Commits
TraceVIC ranks vulnerability-inducing commits by reasoning over how vulnerable code evolves across revisions.
The Security Feature Location Problem
Researchers formalize security feature location, mapping code regions to security features like authentication and encryption to audit implementations.
CISA review makes the case for eliminating vulnerability classes
CISA's FY2024-2025 vulnerability review urges eliminating recurring vulnerability classes, finding 41.5% of 2025 KEV entries map to persistent 'stubborn weaknesses'.
Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?
ESET's Black Hat USA 2026 coverage weighs whether AI-driven vulnerability discovery will decline and whether it will make future software safer.