AI That Hunts Logic Bugs Before Attackers Do - Taylor Luttrell-Williams, Sonar

Pattern-based SAST catches bad code, but not valid code with flawed intent: broken access control, business logic gaps and authentication holes.

Taylor Luttrell-Williams of Sonar introduces the SonarQube Hunter Agent, which maps a repo, runs three specialist agents and adversarially validates every finding, and announces Sonar joining the OpenAI Daybreak cyber partner program. The live demo turns up 46 issues in a Python app, including a user who can make themselves admin and an MFA bypass. Chapters: 0:00 Intro 0:46 Why SAST misses intent bugs 2:37 How Hunter Agent works 4:12 Sonar joins OpenAI Daybreak 5:44 Layering SAST and Hunter Agent 6:27 Demo: running a scan 8:29 46 findings across three classes 10:01 Inside a broken access control bug 12:26 Scheduled scans 13:12 Automatic remediation Taylor Luttrell-Williams https://www.sonarsource.com Join us in SF for the second annual AIE CODE summit: https://aie.codes our last flagship summit of 2026. Applications live now!

Mer att läsa

DeepSeek open sources Super-Agent as a research prototype, a proactive coding agent it says can monitor group chats for coding issues and suggest solutions

Techmeme · för 1 tim sedan

Insurance software maker Guidewire agrees to acquire Hyperexponential, which makes AI-powered insurance underwriting and pricing software, for $1.7B in cash

Techmeme · för 1 tim sedan

One word for AI agents in 2027

Nate Herk · för 5 tim sedan

Tests: chatbots rely on three obscure AI-built voter sites for US midterm answers; Copilot cited the error-prone Ballot Brief in 75% of tests and ChatGPT in 22%

Techmeme · för 6 tim sedan