Curated security research, vulnerabilities, advisories and tools for practitioners.

#llm

Security coverage tagged llm.

1.

When to use SAST versus an LLM security scanner

blog | 2026-09-16 00:00 | about.gitlab.com | original ↗ | #ai-security | #appsec | #devsecops

2.

CrowdStrike Accelerates Real-Time Data Classification with On-Device AI

blog | 2026-09-16 00:00 | crowdstrike.com | original ↗ | #ai-security | #cloud | #data-security

3.

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

blog | 2026-09-15 00:00 | crowdstrike.com | original ↗ | #ai-security | #bug-bounty | #supply-chain

4.

AI Application Security Testing: The Authorisation Boundary

blog | 2026-09-14 15:50 | borghq.io | original ↗ | #ai-security | #appsec | #llm

5.

ReAgent: Open-Source AI Agent for Autonomous Binary Reverse Engineering and C/C++ Reconstruction

tool | 2026-09-09 20:35 | github.com | original ↗ | #ai-security | #open-source | #red-team

6.

Living off Someone Else's Inference

blog | 2026-09-09 11:22 | blog.sentry.security | original ↗ | #ai-security | #reconnaissance | #llm

7.

GPT-6 Astra on GitLab: Faster runs, fewer tokens used

blog | 2026-09-08 00:00 | about.gitlab.com | original ↗ | #gitlab | #benchmark | #ai-agents

8.

Bring your own model to GitLab Duo Self-Hosted with Microsoft Foundry

blog | 2026-09-08 00:00 | about.gitlab.com | original ↗ | #ai-security | #gitlab | #llm

9.

llama.cpp: High-Performance Open-Source LLM Inference in C/C++

tool | 2026-09-06 22:10 | github.com | original ↗ | #ai-security | #open-source | #llm

10.

How to use Codex for Bug Bounty research: explore broadly, validate rigorously

blog | 2026-09-03 07:04 | yeswehack.com | original ↗ | #bug-bounty | #vulnerability-research | #codex

11.

DavidCarliez/trustmebro: Bypass llm guardrails by confusing it with fabricated tool output

tool | 2026-09-02 23:54 | github.com | original ↗ | #ai-security | #open-source | #red-team

12.

The latest from HackerOne

blog | 2026-09-01 14:53 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #rce

13.

Defeating AI-Assisted Reverse Engineering (or at Least Trying To)

blog | 2026-08-19 22:00 | blog.quarkslab.com | original ↗ | #ai-security | #reverse-engineering | #obfuscation

14.

Strategy is Key: Evaluating the Pentesting Skills of Frontier LLMs

research | 2026-08-19 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #benchmark

15.

From chaos to context: Building an AI dev workflow

blog | 2026-08-19 19:01 | about.gitlab.com | original ↗ | #ai-security | #gitlab | #browser-security

16.

Don’t Break the Agent: Lessons in Token Optimization

blog | 2026-08-20 16:30 | jfrog.com | original ↗ | #jfrog | #llm-security | #ai-agents

17.

AI lectures with Dr. Brumley Part 4 | Offense using AI: What autonomous cyber means for your attack surface

blog | 2026-08-13 12:00 | bugcrowd.com | original ↗ | #ai-security | #attack-surface | #offensive-security

18.

AI lectures with Dr. Brumley Part 3 | Securing the AI attack surface

blog | 2026-08-06 12:00 | bugcrowd.com | original ↗ | #ai-security | #attack-surface | #llm

19.

What is AI harness engineering?

blog | 2026-08-06 00:00 | aikido.dev | original ↗ | #ai-security | #agentic-ai | #ai-safety

20.

AI lectures with Dr. Brumley Part 2 | The anatomy of a modern AI system

blog | 2026-07-23 12:00 | bugcrowd.com | original ↗ | #ai-security | #supply-chain | #ai-safety

21.

Evaluating Pentesting Agents for the Real-World Part 2

research | 2026-07-22 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #agentic-ai

22.

How to use Claude Code for Bug Bounty: find fast, validate manually

blog | 2026-07-17 07:14 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #pentesting

23.

Testing AI-powered systems at scale via Bug Bounty, part 2: AI-specific vulnerabilities

blog | 2026-07-15 07:11 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #agentic-ai

24.

Benchmarking 13 AI models on rediscovering known CVEs

blog | 2026-07-16 00:00 | aikido.dev | original ↗ | #ai-security | #vulnerability-research | #benchmark

25.

Evaluating Pentesting Agents for the Real-World

research | 2026-07-14 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #agentic-ai

26.

CTEM for AI Systems: How to Apply the 5-Stage Framework to Your AI Attack Surface

blog | 2026-07-10 16:30 | hackerone.com | original ↗ | #ai-security | #ai-governance | #attack-surface

27.

The Bug Bounty Singularity: Our Hackbot

blog | 2026-07-01 00:00 | josephthacker.com | original ↗ | #ai-security | #bug-bounty | #featured

28.

How LLMs are changing Bug Bounty: an interview with Icare

blog | 2026-07-07 07:06 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #claude-code

29.

Local AI for Penetration Testing & Research

research | 2026-06-28 04:34 | CVE-2026-12194 | projectblack.io | original ↗ | #ai-security | #agentic-ai | #vulnerability-research

30.

How LLMs are changing Bug Bounty: An interview with Rhynorater

blog | 2026-06-30 11:21 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #claude-code