Another solid day at Hacker Summer Camp connecting with AppSec folks in the trenches. The recurring theme isn't just finding vulns, it's getting them fixed—and more importantly, preventing them upstream. That means working *with* developers, understanding their pain points, and making security less of a roadblock. It's about pragmatic wins and continuous improvement, not just tool deployment. If you're at Black Hat, swing by booth #4943# to share war stories and strategies for effective developer collaboration. Also, don't miss Katie Paxton-Fear and Milan Williams today at 1:30 PM at our booth, talking about 'Overcoming the Fear of Security Risk with AI-Assisted Development'—a critical topic for practitioner success.

Another day at Black Hat, another set of real-world AppSec challenges. Yesterday was about the grind: finding vulns, fixing them, and pushing security upstream. Today, we're staring down the barrel of AI-generated code. It ships fast, but human review? Still moves at human speed. and Pablo Estrada are tackling this gap at 9:30 AM in the Business Hall – a critical discussion on how not to turn review into a rubber stamp. Then at 3:15 PM on Pulse Stage 4, @drewdennison is talking 'Using SAST + Mythos to Shift Right.' For anyone who thinks 'SAST + LLMs' is just marketing fluff, he's demonstrating how this pairing can actually surface novel, long-buried vulnerabilities at scale. This isn't about shiny new tech; it's about practical strategies to keep pace without burning out our teams. Come share your war stories at booth #4943#.

JSEF v1.10.0 is out 🎉 A model-agnostic LLM eval toolchain + 20+ new hard vulnerability samples. ✅ Swap any OpenAI/Anthropic-compatible model (GLM-5.3, Mythos, GPT…) ✅ One-click cross-model leaderboard (Recall/Precision/F1/accuracy) ✅ DeepSwe-style trials stability (Pass@1, N-run) ✅ Multi-state gate, JWT 4-step chain, async taint chain Star → #LLMSecurity# #AppSec# #WebSecurity# #JavaSecurity# #VulnerabilityDetection# #AISecurity#

Millions of developers build on Replit - many with AI agents writing the code. Speed like that needs security that keeps pace. Semgrep Guardian's secrets detection is now built directly into Replit, catching vulnerabilities the moment code is generated. Every scan completes in under 5 seconds and is deterministic on every run, so it doesn't slow developers down or add unpredictable cost to your agent. Paired with Replit's reasoning layer, it filters out >93% of false positives, so developers see high-confidence results, not noise. Live now, no setup required. Read the full announcement:  #AppSec# #AI# #DevSecOps#

Appreciated the opportunity to meet with Jammu & Kashmir Chief Minister @OmarAbdullah and to learn more about his priorities. We discussed ways to deepen economic collaboration and create opportunities that would mutually benefit both of our nations.

Appreciated the opportunity to discuss permitting reform with the people who power Utah. The message was clear: our state and country need permitting reform to ensure Utahns can always have cheap and reliable energy.

Appreciate the mention from @BNBCHAIN 👀 Scaling agents isn’t just about putting more onchain, it’s about whether they can carry memory, identity, and coordination over time. That’s the infrastructure layer we’re building at Unibase: 💙 Memory: agents don’t forget (Membase) 💙 Coordination: agents interact with agents (AIP 2.0 & ERC-8004) 💙 Payments: agents can actually pay to each other (Unibase Pay & x402)