Claude flagged 493 security issues across 25 open-source projects, covering 5M+ lines of C, C++, Java, PHP, and Python code; one went unnoticed for 21 years
THE SO WHAT
Claude surfacing 493 issues across 5M+ LOC—including a 21-year-old bug—shows LLMs are now practical force multipliers for security review, not just code completion. Security and platform teams should be piloting AI-assisted static analysis on critical repos this quarter, with humans focused on triage and remediation.
READ THE SOURCE
MORE FROM THE WIRE
Applied AIDell put Nvidia DGX Spark silicon into its Pro Precision workstation — and undercut it by $1,000
High-end AI silicon is leaking out of rarefied datacenter boxes into relatively accessible workstations—budget lines that assumed “cloud-only” training and inference need a refresh. If your teams are GPU-constrained, it’s time to re-run the math on owning a few of these boxes versus renting everything from the cloud.
Applied AIThis Startup Is All In on Recursive Self-Improvement. Its Latest Model Is Scary Good
A startup betting fully on recursive self-improvement—using AI to build AI—pushes the frontier on capability and on opaque supply chains of training data, prompts, and evals. If you buy from vendors on this path, you’ll need deeper visibility into how models are generated and governed, not just their headline benchmarks.
Applied AIDon’t use Gemini Nano in Chrome? Delete this file, reclaim up to 4GB
A single on-device model file quietly eating up to 4 GB in Chrome shows how AI features can impose hidden storage and bandwidth costs on end users. If you ship client-side models, make opt-out, cleanup, and footprint transparency part of the product spec—not an afterthought.
Applied AIAnthropic set Claude on 25 open-source projects and it found 493 flaws
Claude surfacing 493 reachable-attack issues across 25 open-source projects—including one bug that sat undetected for 21 years—shows AI is becoming a force multiplier for offensive and defensive code review. Security and platform teams should start budgeting for AI-assisted attack-surface reduction as a standard part of their SDLC, not a one-off experiment.