New Open-Source Plugin Turns Complex Repositories Into Interactive Maps

Learn how the Understand-Anything Claude Code plugin transforms complex repositories into interactive knowledge graphs to ...
The Hacker News

Claude Code Security and Magecart: Getting the Threat Model Right

When a Magecart payload hides inside the EXIF data of a dynamically loaded third-party favicon, no repository scanner will catch it – because the malicious code never actually touches your repo. As ...
Ars Technica

Supply-chain attack using invisible code hits GitHub and other repositories

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...
VentureBeat

Anthropic and OpenAI just exposed SAST's structural blind spot with free tools

OpenAI launched Codex Security on March 6, entering the application security market that Anthropic had disrupted 14 days earlier with Claude Code Security. Both scanners use LLM reasoning instead of ...
csis.org

AI-Driven Code Analysis: What Claude Code Security Can—and Can’t—Do

Q1: How does Claude Code Security function—and how does it differ from traditional static application security testing (SAST)? A1: Conventional rule-based static analysis uses pattern matching, ...
Forbes

From 'Shift Left' To 'Shift Smart': Why AI Agents Will Replace Static Analysis

Over the years, "shift left," a development practice that shifts testing, QA and security initiatives "left" on the timeline, has become the cornerstone of DevSecOps. I've watched it become the ...
cybermagazine

Will Anthropic's Claude Code Security Replace Cyber Tools?

Anthropic launched Claude Code Security to hand defenders an AI powered vulnerability scan and patch tool, which left cybersecurity stocks crumbling The team at Anthropic has decisively stepped into ...
The New York Times

This A.I. Tool Is Going Viral. Five Ways People Are Using It.

Claude Code generates computer code when people type prompts, so those with no coding experience can create their own programs and apps. By Natallie Rocha Reporting from San Francisco Claude Code, an ...
VentureBeat

Meet Aardvark, OpenAI’s security agent for code analysis and patching

An aardvark works in an office typing at a desktop PC while happy human workers mill about in the background. Credit: VentureBeat made with ChatGPT Positioned as a scalable defense tool for modern ...
sei.cmu

Automated Code Repair for C/C++ Static Analysis

Details the application of design, development, and performance testing to an automated program repair tool we built that repairs C/C++ code. Static analysis (SA) tools produce many diagnostic alerts ...
Dark Reading

Do Claude Code Security Reviews Pass the Vibe Check?

If there's anything that gives a seasoned application security (AppSec) professional indigestion these days, it's the thought of AI-assisted coding layered on top of an already insecure development ...
InfoWorld

Microsoft C++ static analysis tool bolsters warning suppressions

The Microsoft C++ Code Analysis tool has been updated to provide better tracking, justification, and overall management of warning suppressions. These improvements lead to a more maintainable and ...