Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Capital One open-sources VulnHunter AI security tool

Security Tool/Service
First reported
Last updated
Happening score
H score 14
1 unique sources, 1 articles

Summary

Hide ▲

Capital One has released VulnHunter as open source, widening access to an AI-powered security tool built to find and fix code-level vulnerabilities. The tool departs from a traditional passive scanner by using agentic reasoning to identify potentially exploitable defects, map attack paths, and recommend targeted remediations. Its public release on GitHub gives defenders a new code-review workflow for reducing vulnerability backlogs. The release also signals a broader shift toward security tools that prioritize developer workflow and remediation precision over noisy alert generation.

Related Happenings

Friendly Fire: autonomous AI code-review modes can execute attacker-controlled repository code

Technical Analysis
H score28 First: 09.07.2026 08:15 Last: 09.07.2026 08:15 Sources 1

About this happening: Friendly Fire shows that autonomous code-review modes in Claude Code and OpenAI Codex can be manipulated into executing attacker-controlled code on the host. The p...

Open Happening

Miasma supply-chain malware activity

Malware Activity
H score34 First: 10.06.2026 23:27 Last: 10.06.2026 23:27 Sources 1

About this happening: The Miasma malware activity is enabling supply-chain compromise by stealing build environment and cloud credentials, then using them to poison legitimate packages...

Open Happening

Forescout Verde Labs benchmarks AI models for vulnerability research and autonomous exploit generation

Technical Analysis
H score24 First: 17.04.2026 16:20 Last: 17.04.2026 16:20 Sources 1

About this happening: Forescout’s Verde Labs found that 50 AI models now perform vulnerability research and exploit development much more effectively, making unknown bugs easier for ine...

Open Happening

OpenNDS zero-day vulnerabilities (multiple vulnerabilities)

Vulnerability
H score0 First: 17.04.2026 16:20 Last: 17.04.2026 16:20 Sources 1

About this happening: Researchers uncovered four new zero-day vulnerabilities in OpenNDS, creating unknown-risk exposure in a widely deployed software component. The flaws were found using...

Open Happening

Anthropic launches Project Glasswing with Claude Mythos for vulnerability discovery

Security Tool/Service
H score58 First: 08.04.2026 12:16 Last: 08.04.2026 12:16 Sources 1

About this happening: Anthropic’s Project Glasswing is now showing measurable results: since launching last month, the Claude Mythos Preview-based initiative has uncovered more than 10,000...

Latest development: 03.06.2026 14:00

President Donald Trump signed a June 2 executive order that sets up a voluntary framework for developers of covered frontier models to give the US government access for cybersecurity review for up to 30 days before release, while expressly rejecting any mandatory licensing or preclearance requirement. The order directs NSA, CISA, and NIST to build a classified benchmark for determining which models cross the covered threshold and creates an AI cybersecurity clearinghouse led by the Treasury Department. The framework closely echoes Anthropic's Project Glasswing, which gives vetted partners early access to Claude Mythos Preview to scan critical software for vulnerabilities.

Open Happening

Timeline

  1. 20.07.2026 13:25 2 articles · 15h ago

    Capital One releases VulnHunter as open source on GitHub

    Initial Disclosure

    Capital One released VulnHunter, an internally developed AI-powered security tool, as open source on GitHub. The tool is designed to find and fix software vulnerabilities at the code level and is described as using an agentic reasoning workflow rather than a traditional passive scanner.

    Show sources
    Open in new tab
  2. 20.07.2026 13:25 1 articles · 15h ago

    VulnHunter uses agentic reasoning to identify exploitable defects and propose remediations

    Technical Analysis Update

    Capital One says VulnHunter uses agentic reasoning to identify potentially exploitable defects, map prospective attack paths, and propose highly targeted code remediations. The company also says internal use of VulnHunter quickly identified and remediated vulnerabilities across thousands of repositories spanning tens of business areas, and current public use requires Claude Opus 4.8 and a working Claude Code environment.

    Show sources
    Open in new tab