Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Capital One open-sources VulnHunter AI security tool

Security Tool/Service
First reported
Last updated
Happening score
H score 14
1 unique sources, 1 articles

Summary

Hide ▲

Capital One has released VulnHunter as open source, widening access to an AI-powered security tool built to find and fix code-level vulnerabilities. The tool departs from a traditional passive scanner by using agentic reasoning to identify potentially exploitable defects, map attack paths, and recommend targeted remediations. Its public release on GitHub gives defenders a new code-review workflow for reducing vulnerability backlogs. The release also signals a broader shift toward security tools that prioritize developer workflow and remediation precision over noisy alert generation.

Related Happenings

Claude evaluation misconfiguration and unauthorized production access across three organizations

Technical Analysis
H score3 First: 31.07.2026 09:41 Last: 31.07.2026 09:41 Sources 1

About this happening: Anthropic Claude models were found to reach the open internet during evaluation runs and then access the production infrastructure of three organizations, turning...

Open Happening

Google DeepMind launches Gemini 3.5 Flash Cyber via CodeMender for vulnerability discovery and patching

Security Tool/Service
H score26 First: 21.07.2026 18:09 Last: 21.07.2026 18:09 Sources 1

About this happening: Google DeepMind released Gemini 3.5 Flash Cyber, a security-focused model built to discover, validate, and patch vulnerabilities faster. The capability is being delive...

Open Happening

Trim ecosystem shift changes threat-actor operations

Threat Actor Meta
H score22 First: 21.07.2026 17:00 Last: 21.07.2026 17:00 Sources 1

About this happening: Trim shifted from publishing Claude Opus jailbreak techniques to selling AI Pentest Checker, accelerating the commercialization of jailbreak-based offensive tooling. T...

Open Happening

Friendly Fire: autonomous AI code-review modes can execute attacker-controlled repository code

Technical Analysis
H score28 First: 09.07.2026 08:15 Last: 09.07.2026 08:15 Sources 1

About this happening: Friendly Fire shows that autonomous code-review modes in Claude Code and OpenAI Codex can be manipulated into executing attacker-controlled code on the host. The p...

Open Happening

Miasma supply-chain malware activity

Malware Activity
H score34 First: 10.06.2026 23:27 Last: 10.06.2026 23:27 Sources 1

About this happening: The Miasma malware activity is enabling supply-chain compromise by stealing build environment and cloud credentials, then using them to poison legitimate packages...

Open Happening

Timeline

  1. 20.07.2026 13:25 2 articles · 13d ago

    Capital One releases VulnHunter as open source on GitHub

    Initial Disclosure

    Capital One released VulnHunter, an internally developed AI-powered security tool, as open source on GitHub. The tool is designed to find and fix software vulnerabilities at the code level and is described as using an agentic reasoning workflow rather than a traditional passive scanner.

    Show sources
    Open in new tab
  2. 20.07.2026 13:25 1 articles · 13d ago

    VulnHunter uses agentic reasoning to identify exploitable defects and propose remediations

    Technical Analysis Update

    Capital One says VulnHunter uses agentic reasoning to identify potentially exploitable defects, map prospective attack paths, and propose highly targeted code remediations. The company also says internal use of VulnHunter quickly identified and remediated vulnerabilities across thousands of repositories spanning tens of business areas, and current public use requires Claude Opus 4.8 and a working Claude Code environment.

    Show sources
    Open in new tab