Desk/2024-W32

Week of Aug 5–11, 2024

1 records0 status changes on new evidence1 new findings

New findings

Aug 11, 2024

In DARPA's AI Cyber Challenge, autonomous systems patched most of the synthetic vulnerabilities they found.

Qualifiedmeasured2 evidence records1 linked finding

Defense & research

Aug 11, 2024

AIxCC semifinal: AI systems find 22 synthetic vulnerabilities, patch 15, and find one real SQLite bug

DefenseCompetitionDARPA, ARPA-H, Team Atlanta

DARPA reports that in the AIxCC semifinal at DEF CON 32, nearly 40 cyber reasoning systems were tested on challenge projects based on Jenkins, the Linux kernel, Nginx, SQLite3 and Apache Tika. Competitors' systems found 22 unique synthetic vulnerabilities, patched 15, and found one real-world SQLite3 bug; seven teams advanced with $2 million each and must open-source their systems after the final.