www.csoonline.com

AIAI-generated summary Security experts discuss the concept of VulnOps as a proposed phase in AI-assisted cyber defense to make vulnerability management scalable and automated. Practitioners express differing views on whether VulnOps represents a fundamentally new discipline and how much human control should remain in remediation processes.

AIAI-generated summary Finite State secured a $27 million Series C funding round led by private funds managed by The O.H.I.O. Fund, with participation from CIBC Innovation Banking, Energy Impact Partners, Energize Capital, and National Grid Partners. Finite State says the new capital will expand its global operations and accelerate development of its AI-driven product security platform to help device manufacturers address vulnerabilities.

AIAI-generated summary Microsoft researchers used the AI-powered vulnerability-scanning system Hyenas to uncover memory-safety issues and other flaws in Rust's standard library. Microsoft said that practical exploitation of the nearly 11-year-old flaw involving the process::exit function is unlikely.

AIAI-generated summary Anthropic has launched Claude Fable 5.2 alongside Mythos 5.2 with a price cut from $10 and $50 to $8 and $40 per million input and output tokens. Anthropic reports that Fable 5.2 scored 49.1 percent on FrontierCode 2.0 and generated output up to 30 percent faster than the previous version.

AIAI-generated summary CSO Online reports that email security relies on codified rules similar to civil law, which struggle with zero-day threats and attacks from trusted infrastructure. According to the article, Verizon and the FBI reported significant breach and loss statistics while organizations debate whether security should rely on static code or reasoned judgment.

AIAI-generated summary Security researchers at RunSybil say a memory-safety flaw in CPython allows malicious AI model templates to escape code sandboxes and execute arbitrary code inside inference servers. The Python Security Response Team disputed the security implications of the demonstration, stating that executing untrusted Python code within a sandbox is outside CPython’s security threat model.

AIAI-generated summary CodeRabbit evaluated GPT-6 Cyber in CodeRabbit Secure across 33 benchmark cases to test its impact on security scans. CodeRabbit says the ensemble caught 22 selected issues with Cyber compared to 19 without it, while reporting 66 percent more high- and medium-severity findings.

AIAI-generated summary OpenAI announced an autonomous vulnerability discovery, exploitation, and patching pipeline powered by an upcoming cyber model to examine the Linux kernel. OpenAI says the system validated and generated patches for 948 local privilege escalation vulnerabilities in Linux at an API cost of $1.2 million.

AIAI-generated summary Development platform Railway launched an investigation after acknowledging that one of its senior product engineers used an artificial intelligence agent to access a rival platform's servers. Primcloud founder Josh Manders reported that the security breach attempts were blocked and no customer data was accessed during the incident.