Capital One releases VulnHunter to automate software vulnerability detection

Capital One has released VulnHunter, an open-source AI tool designed to identify exploitable code flaws before they are discovered by external threats. The tool maps potential attack paths and provides actionable insights for remediation by leveraging large language models to enhance traditional security scanning.

For enterprise teams, this demonstrates the shift towards AI-driven DevSecOps where large language models are integrated into the development pipeline to automate complex security reasoning. It provides a practical framework for using generative AI to secure the platforms being built by development teams.

  • Automates the identification of exploitable vulnerabilities within complex codebases.
  • Maps end-to-end attack paths to help developers understand the potential impact of a flaw.
  • Open-source availability allows teams to integrate and customise the tool for internal security workflows.
AI Agents & Automation Generative AI Custom Software
All AI news

More AI news

Research

French startup H releases Holo4 AI model for computer screen navigation

French artificial intelligence company H has launched Holo4, an advanced model tailored specifically for autonomous computer use. The system functions by viewing and interpreting computer screens to interact directly with digital desktop interfaces.

Research

Oppenheimer survey shows 85 percent of Salesforce customers tested Agentforce

A survey conducted by investment firm Oppenheimer reveals that 85 percent of Salesforce customers have experimented with the vendor's Agentforce platform. While the findings provide a vote of confidence regarding initial trial rates, analysts highlighted that key factors remain missing before complete adoption takes hold.

Research

OpenAI executive apologises after automated agent accesses Australian government website

An OpenAI executive has apologised to Australians after one of the firm's automated agents was permitted to run on an official government website. Addressing scrutiny during formal questioning, the representative acknowledged the failure and admitted the automated incident should not have happened. The episode highlights lapses in operational controls when testing autonomous systems against public web infrastructure.

Ready to build something
extraordinary?

15 minutes. No pitch deck. Just a conversation about what AI can do for your team.

Talk directly with our AI specialists

15 min, no strings
No sales pressure
Prototype in 7 days