Загрузка видео...

Не удалось загрузить видео

На главную

Holy shit...Google just dropped CodeMender an autonomous AI agent that finds and fixes security bugs in code by itself. This isn’t a static analysis tool. It’s a self-reasoning system that patches vulnerabilities and rewrites insecure code before humans even find it. Let’s break it down ↓

hasantoxr's profile picture

Hasan Toor

436,674 subscribers

127,108 просмотров • 6 месяцев назад •via X (Twitter)

ОбразованиеНаука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.
0:40

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.

OpenAI Developers

1,715,780 просмотров • 3 месяцев назад

Claude Code tip: create an agent that specialises in code review and security. Then add a new memory entry with a nickname for it so you can call it anytime. My code review and security agent is called Big Tony.
0:25

Claude Code tip: create an agent that specialises in code review and security. Then add a new memory entry with a nickname for it so you can call it anytime. My code review and security agent is called Big Tony.

Richie - oss/acc

134,422 просмотров • 5 месяцев назад

China just dropped a free AI super agent that can build software for you. It’s called DeerFlow 2.0. And it’s exploding on GitHub right now. This thing doesn’t just chat. You give it a goal. - It researches the problem. - Writes the code. - Creates files. - Launches sub-agents. Then delivers a finished result. Basically… an AI dev team in one tool.
0:29

China just dropped a free AI super agent that can build software for you. It’s called DeerFlow 2.0. And it’s exploding on GitHub right now. This thing doesn’t just chat. You give it a goal. - It researches the problem. - Writes the code. - Creates files. - Launches sub-agents. Then delivers a finished result. Basically… an AI dev team in one tool.

Julian Goldie SEO

231,446 просмотров • 3 месяцев назад

Olympix is officially in Live Beta! Olympix is a proactive DevSecOps tool that employs static analysis to empower smart contract developers to detect vulnerabilities in real-time. Developers can leverage Olympix to assist them in creating robust and secure code Try it here:
0:49

Olympix is officially in Live Beta! Olympix is a proactive DevSecOps tool that employs static analysis to empower smart contract developers to detect vulnerabilities in real-time. Developers can leverage Olympix to assist them in creating robust and secure code Try it here:

Olympix

12,816 просмотров • 2 лет назад

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:
0:50

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:

Claude

26,199,330 просмотров • 4 месяцев назад

OpenAI just released Codex Security, an AI agent that scans software projects to fix vulnerabilities while ignoring harmless bugs. Testing on 1.2mn commits found 792 critical flaws and dropped false alarms by 50%. Here is how the Codex Security agent works Initially, it scans your software project to learn how all the different pieces of code connect. It uses that knowledge to build a threat model, which acts as a custom map showing exactly where your software might be exposed to hackers. The agent then hunts for potential security holes based on that specific map. When it spots a possible flaw, it does not just send you a random alert. Instead, it creates a completely safe and isolated copy of your system known as a sandbox. The agent then actively tries to break into that sandboxed copy to prove if the security weakness is a real danger. If the agent successfully exploits its own test environment, it knows the bug is a genuine threat and not a false alarm. After confirming the danger, the agent writes a custom software patch to fix the broken code. It then tests that new patch to guarantee the fix does not accidentally break any other features in your software.
0:37

OpenAI just released Codex Security, an AI agent that scans software projects to fix vulnerabilities while ignoring harmless bugs. Testing on 1.2mn commits found 792 critical flaws and dropped false alarms by 50%. Here is how the Codex Security agent works Initially, it scans your software project to learn how all the different pieces of code connect. It uses that knowledge to build a threat model, which acts as a custom map showing exactly where your software might be exposed to hackers. The agent then hunts for potential security holes based on that specific map. When it spots a possible flaw, it does not just send you a random alert. Instead, it creates a completely safe and isolated copy of your system known as a sandbox. The agent then actively tries to break into that sandboxed copy to prove if the security weakness is a real danger. If the agent successfully exploits its own test environment, it knows the bug is a genuine threat and not a false alarm. After confirming the danger, the agent writes a custom software patch to fix the broken code. It then tests that new patch to guarantee the fix does not accidentally break any other features in your software.

Rohan Paul

13,208 просмотров • 3 месяцев назад

This might be the best AI code review agent I've seen yet. It’s called Diamond and provides feedback on every pull request, catching bugs, logic errors, and security vulnerabilities. Here’s everything you need to know:
0:24

This might be the best AI code review agent I've seen yet. It’s called Diamond and provides feedback on every pull request, catching bugs, logic errors, and security vulnerabilities. Here’s everything you need to know:

Alvaro Cintas

29,785 просмотров • 1 год назад

Introducing CodeRabbit Plugin for Claude Code! The CodeRabbit plugin for Claude Code creates an autonomous AI development workflow, helping you write and fix code without manual intervention. Type /coderabbit:review (or just say “review my code”) to get AI-powered fixes directly in your dev flow! Try it today, it’s free!
1:59

Introducing CodeRabbit Plugin for Claude Code! The CodeRabbit plugin for Claude Code creates an autonomous AI development workflow, helping you write and fix code without manual intervention. Type /coderabbit:review (or just say “review my code”) to get AI-powered fixes directly in your dev flow! Try it today, it’s free!

CodeRabbit

27,190 просмотров • 4 месяцев назад

4/ Crew AI Orchestration framework for building reliable autonomous AI agents This example shows an agent that automatically creates and schedules social media posts, but it can research, code, and even write apps João Moura あい
5:43

4/ Crew AI Orchestration framework for building reliable autonomous AI agents This example shows an agent that automatically creates and schedules social media posts, but it can research, code, and even write apps João Moura あい

Alex Reibman 🖇️

36,126 просмотров • 2 лет назад

AI has completely changed how code gets written. Models can now generate thousands of lines in minutes. That speed is exciting but it also creates a new problem... reviews are slow. Context is missing. Bugs slip through. The bottleneck isn’t writing code anymore, it’s understanding and shipping it safely. It’s why I’ve been looking closely at tools built AI-first for this stage of the workflow. One that stands out is Graphite Agent. It sits inside your PRs and does what reviews have always struggled with at scale: → Explains logic line-by-line → Surfaces and fixes bugs → Resolves failing checks in context All without leaving the review flow.
0:32

AI has completely changed how code gets written. Models can now generate thousands of lines in minutes. That speed is exciting but it also creates a new problem... reviews are slow. Context is missing. Bugs slip through. The bottleneck isn’t writing code anymore, it’s understanding and shipping it safely. It’s why I’ve been looking closely at tools built AI-first for this stage of the workflow. One that stands out is Graphite Agent. It sits inside your PRs and does what reviews have always struggled with at scale: → Explains logic line-by-line → Surfaces and fixes bugs → Resolves failing checks in context All without leaving the review flow.

Shruti

49,398 просмотров • 8 месяцев назад

A new frontier AI model just dropped on OpenRouter and it’s free. Pony Alpha delivers 200k context, visible reasoning, adjustable thinking depth, and agent-ready tool calling that rivals (and beats) Opus 4.5 in benchmarks. This one’s serious.
9:08

A new frontier AI model just dropped on OpenRouter and it’s free. Pony Alpha delivers 200k context, visible reasoning, adjustable thinking depth, and agent-ready tool calling that rivals (and beats) Opus 4.5 in benchmarks. This one’s serious.

Mervin Praison

23,400 просмотров • 4 месяцев назад

Playing with open-ended AI Agent behavior. Here's an AI Agent (claude code) making a self-portrait. It "evolves" the image by: writing code that generates image -> view image -> modify image -> view -> modify -> repeat.
0:41

Playing with open-ended AI Agent behavior. Here's an AI Agent (claude code) making a self-portrait. It "evolves" the image by: writing code that generates image -> view image -> modify image -> view -> modify -> repeat.

Max | Emergent Garden

22,851 просмотров • 10 месяцев назад

XBOW raised $117M to build AI hacking agents. Now someone just open-sourced it for FREE. Strix deploys autonomous AI agents that act like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Why it matters: The biggest problem with traditional security testing is that it doesn't keep up with development speed. Strix solves this by integrating directly into your workflow: ↳ Run it in CI/CD to catch vulnerabilities before production ↳ Get real proof-of-concepts, not false positives from static analysis ↳ Test everything: injection attacks, access control, business logic flaws The best part? You don't need to be a security expert. Strix includes a complete hacker toolkit - HTTP proxy, browser automation, and Python runtime for exploit development. It's like having a security team that works at the speed of your CI/CD pipeline. The best part is that the tool runs locally in Docker containers, so your code never leaves your environment. Getting started is simple: - pipx install strix-agent - Point it at your codebase (app, repo, or directory) Everything is 100% open-source! I've shared link to the GitHub repo in the replies!
0:23

XBOW raised $117M to build AI hacking agents. Now someone just open-sourced it for FREE. Strix deploys autonomous AI agents that act like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Why it matters: The biggest problem with traditional security testing is that it doesn't keep up with development speed. Strix solves this by integrating directly into your workflow: ↳ Run it in CI/CD to catch vulnerabilities before production ↳ Get real proof-of-concepts, not false positives from static analysis ↳ Test everything: injection attacks, access control, business logic flaws The best part? You don't need to be a security expert. Strix includes a complete hacker toolkit - HTTP proxy, browser automation, and Python runtime for exploit development. It's like having a security team that works at the speed of your CI/CD pipeline. The best part is that the tool runs locally in Docker containers, so your code never leaves your environment. Getting started is simple: - pipx install strix-agent - Point it at your codebase (app, repo, or directory) Everything is 100% open-source! I've shared link to the GitHub repo in the replies!

Akshay 🚀

96,623 просмотров • 7 месяцев назад

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:
0:28

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:

Alvaro Cintas

79,813 просмотров • 1 год назад

CodeMender has already created and submitted 72 high-quality fixes for serious security issues in major open-source projects. 🛠️ It can instantly patch new flaws as well as rewrite old code to eliminate entire classes of vulnerabilities – saving developers significant time.
0:40

CodeMender has already created and submitted 72 high-quality fixes for serious security issues in major open-source projects. 🛠️ It can instantly patch new flaws as well as rewrite old code to eliminate entire classes of vulnerabilities – saving developers significant time.

Google DeepMind

32,717 просмотров • 8 месяцев назад

Introducing Asterisk MCP - An MCP server that fixes security vulnerabilities while you vibe code. Supports Cursor, Windsurf, Cline, Claude, and any IDE that supports the model context protocol. It can perform codebase-wide scans, analyze snippets in your conversation history, and verify changes/fixes for security issues. mcp dot asterisk dot so
0:57

Introducing Asterisk MCP - An MCP server that fixes security vulnerabilities while you vibe code. Supports Cursor, Windsurf, Cline, Claude, and any IDE that supports the model context protocol. It can perform codebase-wide scans, analyze snippets in your conversation history, and verify changes/fixes for security issues. mcp dot asterisk dot so

mufeed vh

14,312 просмотров • 1 год назад

Bash is all you need! Which is why I'm introducing my holiday project: just-bash just-bash is a pretty complete implementation of bash in TypeScript designed to be used as a bash tool by AI agents. Because it turns out agents love exploring data via shell scripts, even beyond coding. It comes with grep, sed, awk and the 99th percentile features that an agent like Claude Code or Cursor would use. In fact, Claude Code can use it for secure bash execution. In the package - A bash-tool for AI SDK - A binary for use by yourself or your coding agents - An overlay filesystem to feed files to your agent securely - A Vercel Sandbox compatible API, so you can quickly upgrade to a real VM if you need to run binaries - An example AI agent that explores the just-bash code base using just-bash - I imported the Oils shell bash compatibility suite and just-bash passes a very good chunk What is interesting about this codebase: It was essentially entirely written by Opus 4.5. Coding agents love bash and they are good at reproducing it. They are also great at text-book recursive descent parsers and AST tweet-walk interpreters. That said, it is, like, a lot of code and I didn't read it all 😅. This is very much a hack, but it also seems to be _really_ useful. I haven't really found anything agents want to use that it doesn't support and it's fast and secure (caveats apply). It doesn't have write access to your computer and the filesystem is given a root that the agent cannot escape from. Find it at Related: Our recent blog post how we migrated our data analysis agent to bash tools and achieved incredible quality improvements The video shows the example agent investigating the just-bash code base
1:47

Bash is all you need! Which is why I'm introducing my holiday project: just-bash just-bash is a pretty complete implementation of bash in TypeScript designed to be used as a bash tool by AI agents. Because it turns out agents love exploring data via shell scripts, even beyond coding. It comes with grep, sed, awk and the 99th percentile features that an agent like Claude Code or Cursor would use. In fact, Claude Code can use it for secure bash execution. In the package - A bash-tool for AI SDK - A binary for use by yourself or your coding agents - An overlay filesystem to feed files to your agent securely - A Vercel Sandbox compatible API, so you can quickly upgrade to a real VM if you need to run binaries - An example AI agent that explores the just-bash code base using just-bash - I imported the Oils shell bash compatibility suite and just-bash passes a very good chunk What is interesting about this codebase: It was essentially entirely written by Opus 4.5. Coding agents love bash and they are good at reproducing it. They are also great at text-book recursive descent parsers and AST tweet-walk interpreters. That said, it is, like, a lot of code and I didn't read it all 😅. This is very much a hack, but it also seems to be _really_ useful. I haven't really found anything agents want to use that it doesn't support and it's fast and secure (caveats apply). It doesn't have write access to your computer and the filesystem is given a root that the agent cannot escape from. Find it at Related: Our recent blog post how we migrated our data analysis agent to bash tools and achieved incredible quality improvements The video shows the example agent investigating the just-bash code base

Malte Ubl

124,713 просмотров • 6 месяцев назад

🚨 #ChatGPT + napari 🚨 Releasing my latest weekend project: Omega, an autonomous LLM agent that writes image processing and analysis code, fixes its mistakes, accesses the napari viewer, makes widgets, & more! OpenAI #OmegaAgent
0:35

🚨 #ChatGPT + napari 🚨 Releasing my latest weekend project: Omega, an autonomous LLM agent that writes image processing and analysis code, fixes its mistakes, accesses the napari viewer, makes widgets, & more! OpenAI #OmegaAgent

Loïc A. Royer 💻🔬⚗️

328,856 просмотров • 3 лет назад

Claude Code 2.1.63 dropped with a new built-in command: /simplify It reviews your changed code for three things: - Reuse opportunities (duplicated logic, extractable patterns) - Code quality (readability, naming, structure) - Efficiency (unnecessary complexity, redundant operations) Then it actually fixes what it finds. Not just suggestions, it edits. How to use it: 1. Make your code changes as usual 2. Run /simplify 3. It analyzes your diff, finds issues, and applies fixes In the video I ran it after finishing a PR review and noticed it spawned 3 parallel agents using Haiku 4.5 to do the analysis... fast and cheap Try it out 👇
0:27

Claude Code 2.1.63 dropped with a new built-in command: /simplify It reviews your changed code for three things: - Reuse opportunities (duplicated logic, extractable patterns) - Code quality (readability, naming, structure) - Efficiency (unnecessary complexity, redundant operations) Then it actually fixes what it finds. Not just suggestions, it edits. How to use it: 1. Make your code changes as usual 2. Run /simplify 3. It analyzes your diff, finds issues, and applies fixes In the video I ran it after finishing a PR review and noticed it spawned 3 parallel agents using Haiku 4.5 to do the analysis... fast and cheap Try it out 👇

Daniel San

372,662 просмотров • 3 месяцев назад

An autonomous agent is only as safe its reasoning. ThoughtProofAI verifies that reasoning before the agent acts - catching a flawed decision before it costs anything. Don't trust. Verify. Learn exactly how 👇
2:02

An autonomous agent is only as safe its reasoning. ThoughtProofAI verifies that reasoning before the agent acts - catching a flawed decision before it costs anything. Don't trust. Verify. Learn exactly how 👇

GOAT Network

72,279 просмотров • 8 дней назад