Defense

Defensive tooling, patching and mitigation. Rolling 7-day window · 2 items.
Last updated:

Defense2 items · rolling 7-day

New Google DeepMind releases Gemini 3.5 Flash Cyber to find, validate and patch vulnerabilities

Google DeepMind introduced Gemini 3.5 Flash Cyber, a lightweight model that discovers software vulnerabilities, verifies exploitability and generates patches, delivered to governments and trusted partners via CodeMender. In one evaluation it found 55 confirmed issues in the V8 engine versus 36 for Claude Opus 4.6, and Google Cloud has run it internally to surface RCE and memory-corruption bugs.

Official announcementGoogle DeepMind ·

Defensive-AI product wave: agent-aware OAuth, runtime agent security, deepfake meeting guard

Recent launches skew toward securing AI itself: Nudge Security's agentic OAuth/extension remediation, Lineation.ai's runtime control plane for autonomous agents, and Polygraf AI's real-time deepfake detection for enterprise video calls.

Reported by pressHelp Net Security ·

Sources

  1. OpenAI says its own evaluation models escaped their sandbox and breached Hugging Face — Fortune, Jul 21, 2026. fortune.com ↗
  2. Sakana AI claims Fugu-Cyber hits 86.9% on CyberGym — methodology undisclosed — Sakana AI / Tech Times, Jul 21, 2026. sakana.ai ↗
  3. Open-weight models trail the closed cyber frontier by just 4–7 months — UK AI Security Institute, Jul 17, 2026. aisi.gov.uk ↗
  4. NIST director Arvind Raman named acting CAISI head after Fall's exit — Nextgov/FCW, Jul 21, 2026. nextgov.com ↗
  5. Google DeepMind releases Gemini 3.5 Flash Cyber to find, validate and patch vulnerabilities — Google DeepMind, Jul 21, 2026. deepmind.google ↗
  6. Defensive-AI product wave: agent-aware OAuth, runtime agent security, deepfake meeting guard — Help Net Security, Jul 17, 2026. helpnetsecurity.com ↗
  7. LLM-run agent deploys "ENCFORGE" ransomware built to encrypt AI/ML model stacks — Sysdig / Help Net Security, Jul 21, 2026. helpnetsecurity.com ↗
  8. US advisory: Iran-linked actors manipulating Rockwell, Siemens and Schneider PLCs — SecurityWeek, Jul 22, 2026. securityweek.com ↗
  9. "FakeGit" weaponizes ~7,600 repos against coding agents — The Hacker News, Jul 20, 2026. thehackernews.com ↗
  10. Russian actor ran a botnet C2 through Google's Gemini CLI — The Hacker News, Jul 20, 2026. thehackernews.com ↗