arXiv:2611.06294v1 Announce Type: new Abstract: Large language model (LLM) coding assistants and agents construct a repository context before generating code. For security-sensitive code, this context decides whether the model sees the project's safeguards (e.g., authorization checks) or insecure code to imitate.
A.S.E 2.0: Understanding How Repository Context Impacts the Security of LLM-Generated Code
About this summary. This is a short excerpt from the description that arXiv cs.CR published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://arxiv.org/abs/2611.06294
Source attribution: headline and facts are from arXiv cs.CR (arxiv.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns
Key Points Agentic hacking platforms like ARTEX, where AI models autonomously drive vulnerability discovery and exploitation, have been observed to be used by various…
When File Ingestion Misleads Language Models: Measuring and Mitigating Divergences in Office Documents
arXiv:2611.05806v1 Announce Type: new Abstract: Office documents are now routinely uploaded to large language models (LLMs) for processing. However, an LLM does not…
VerifiedIDA | Making LLM-Driven Reverse Engineering Inspectable, Continuable and Reusable
Executive SummarySentinelLABS evaluated how frontier models reverse engineer binaries and annotate disassembler databases, finding recurring problems with inaccurate…
TxBench: A Benchmark of Attack Transactions and Evidence-Backed Negatives on Seven EVM Chains
arXiv:2611.04411v1 Announce Type: new Abstract: Researchers evaluate detectors of malicious smart-contract transactions on datasets that each paper assembles anew. Their…
AIs Hacking the Law
In both a 2021 essay and my 2022 book, A Hacker’s Mind, I talk about AIs finding vulnerabilities and exploits—hacking—the legal system. Here’s some demonstrations of…
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
Introduction As part of proactive threat monitoring, Kaspersky’s Cyber Threat Intelligence team identified a malicious campaign involving C2 agents controlled by…