SBOM-VEX-Taint-Analysis

SBOM → VEX Agent 自动从 SBOM 生成已签名的 CycloneDX VEX 文档，使用安全的多元人工智能管道，依照 OWASP GenAI 安全项目指南构建。 问题 生成一份 SBOM 会发现数百个 CVE。实际上，超过 90% 在特定产品的运行时环境中不可利用。如果没有漏洞可利用性交换（VEX）文档，每个下游工具 —— Dependency-Track、发布闸门、采购清单 —— 都会被误报淹没。 更多技术细节和测试结果请查阅 WIKI。 手动生成 VEX 耗时且无法规模化。一名熟练分析员可能花费数小时评估单个组件。一份生产环境的 SBOM 可能包含 500 到 200...

my-dshrness-aipentest

DSH PenTest Workflow v4.2 A multi-agent penetration testing w...

From Concept to Context Engine: How Wiz Built AI-Powered Data Discovery

Inside the multi-agent pipeline and feedback loops that turned a bucket scanner into a context engine...

Small, Free, and Effective: Orchestrating Open-Weight Small Language Models to Outperform Single LLM for Malware Analysis

Malware analysis demands rapid interpretation of complex detonation reports spanning filesystem, network, and process behaviours. While large language models LLMs demonstrate impressive capabilities for technical artifact interpretation, the opacity and escalating API costs of closed-weight...

The Increasing Role of AI in Vulnerability Research

At Wordfence, we run a bug bounty program that pays out mid-six figures per year to researchers in bug bounties for WordPress related vulnerabilities. Funding this research helps us improve security for the WordPress community overall, and helps us secure our customers by rolling out protection f...