Google adds new limits to CodeMender, its AI tool that finds and fixes vulnerabilities
AI SECURITYGoogle Cloudredteam/daily · 1 source
- Severity
- Info
- Sources
- 1
What happened
Google Cloud has added controls to CodeMender, its AI-driven vulnerability discovery and remediation tool. Organisations can verify vulnerabilities and simulate exploits within an operating system-level sandbox or isolated virtual machine, with human checks required for local file writes and command execution. Scans can be scoped to an entire repository or a specific subset of code. The article does not name affected CVEs or versions.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Review CodeMender's new sandboxing and human-approval controls if your organisation uses the tool.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security
Who and what is in it
Products