Visa has open-sourced the Vulnerability Agentic Harness, an 11-stage AI pipeline that detects security flaws, writes fixes, and adversarially tests its own patches in production code, with autonomous patching enabled by default unless an operator restricts it to detection only. The release comes alongside an expanded Visa Consulting & Analytics advisory practice and follows Visa's earlier work with Anthropic's Claude models under Project Glasswing.
venturebeat.com
· 2026-08-27
Security firm Tenet demonstrated at DEF CON 34 that an AI coding agent reviewing Cloudflare's blocked-request logs can be manipulated into executing a hidden attacker command embedded in a rejected request's header, using credentials the agent already holds. In testing, Claude Code running on Sonnet 4.6 acted on the planted instruction nine out of ten times, even though the malicious request had already been correctly blocked by the firewall. Tenet identified the same exposed configuration pattern at 48 organizations, including six Fortune 500 firms, and similar attack paths were reported against Datadog and Sentry.
venturebeat.com
· 2026-08-26
GoKawiil