Fetching from the wire…
01
02
03
04
05
06
07
08
Skills2026-03-29 · source-backed
OpenAI's Codex Security found 10,561 high-severity vulnerabilities across 1.2M commits, with false positive rates dropping 50% across successive scans. With 35 AI-generated CVEs in March alone, treat AI-generated code like untrusted contributions.
Each link below shares sources, entities, or timing with this story.
OpenAI went public with Codex Security's numbers, and they're significant enough to pay attention to. The AI security agent — evolved from the Aardvark private beta — has scanned over 1.2 million commits in the past 30 days, surfacing 792 critical and 10,561 high-severity find...
OpenAI announced the acquisition of Promptfoo ($86M valuation, used by 25% of Fortune 500) and continued rolling out Codex Security, which scanned 1.2M commits in its first month and found 792 critical and 10,561 high-severity vulnerabilities — including 14 assigned CVEs acros...
Two competing models for AI-powered security shipped on the same day. OpenAI launched Codex Security ("Aardvark") — an AI AppSec agent that builds project-specific threat models, then hunts for vulnerabilities and tests them in isolated environments. 30-day beta: 1.2M+ commits...
Tracking every publicly announced shared reset since September 2025, separate from plan refills: 32 in 347 days, one every 10.8 days on average, but 16 in the last 90 (one per 5.6) and seven in the last 30 (one per 4.3). 2025 had seven total; 2026 has 25 so far. Median gap is...
The Amazon Q bug is one instance of a 2026 pattern: MCP configuration carried in repositories is now an RCE supply-chain vector, not just untrusted tool output. Cursor, VS Code, Windsurf, Claude Code, and Gemini-CLI are all vulnerable to MCP-based auto-launch attacks (Windsurf...
Two AI toolchain CVEs hit CISA's Known Exploited Vulnerabilities catalog this week, and the attack chain connecting them is the kind of thing that should change how you think about supply chain trust. CVE-2026-33017: Langflow, the popular agent workflow builder, has an unauthe...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.