Another solid day at Hacker Summer Camp connecting with AppSec folks in the trenches. The recurring theme isn't just finding vulns, it's getting them fixed—and more importantly, preventing them upstream. That means working *with* developers, understanding their pain points, and making security less of a roadblock. It's about pragmatic wins and continuous improvement, not just tool deployment. If you're at Black Hat, swing by booth #4943# to share war stories and strategies for effective developer collaboration. Also, don't miss Katie Paxton-Fear and Milan Williams today at 1:30 PM at our booth, talking about 'Overcoming the Fear of Security Risk with AI-Assisted Development'—a critical topic for practitioner success.

Another day at Black Hat, another set of real-world AppSec challenges. Yesterday was about the grind: finding vulns, fixing them, and pushing security upstream. Today, we're staring down the barrel of AI-generated code. It ships fast, but human review? Still moves at human speed. and Pablo Estrada are tackling this gap at 9:30 AM in the Business Hall – a critical discussion on how not to turn review into a rubber stamp. Then at 3:15 PM on Pulse Stage 4, @drewdennison is talking 'Using SAST + Mythos to Shift Right.' For anyone who thinks 'SAST + LLMs' is just marketing fluff, he's demonstrating how this pairing can actually surface novel, long-buried vulnerabilities at scale. This isn't about shiny new tech; it's about practical strategies to keep pace without burning out our teams. Come share your war stories at booth #4943#.

JSEF v1.10.0 is out 🎉 A model-agnostic LLM eval toolchain + 20+ new hard vulnerability samples. ✅ Swap any OpenAI/Anthropic-compatible model (GLM-5.3, Mythos, GPT…) ✅ One-click cross-model leaderboard (Recall/Precision/F1/accuracy) ✅ DeepSwe-style trials stability (Pass@1, N-run) ✅ Multi-state gate, JWT 4-step chain, async taint chain Star → #LLMSecurity# #AppSec# #WebSecurity# #JavaSecurity# #VulnerabilityDetection# #AISecurity#

Millions of developers build on Replit - many with AI agents writing the code. Speed like that needs security that keeps pace. Semgrep Guardian's secrets detection is now built directly into Replit, catching vulnerabilities the moment code is generated. Every scan completes in under 5 seconds and is deterministic on every run, so it doesn't slow developers down or add unpredictable cost to your agent. Paired with Replit's reasoning layer, it filters out >93% of false positives, so developers see high-confidence results, not noise. Live now, no setup required. Read the full announcement:  #AppSec# #AI# #DevSecOps#

Appreciated the chance to speak at NVAR’s Politics & Pancakes Breakfast this morning. Realtors see firsthand the challenges families face trying to buy a home in Northern Virginia. I appreciate NVAR’s advocacy for legislation like the ROAD to Housing Act that we passed this year and their work to make home ownership a reality for more families.

Appreciated the opportunity to speak with regional and international media on Thursday about President Trump’s efforts to advance peace and unlock new opportunities for stability and prosperity across the Middle East and Africa. We discussed the progress toward reunifying Libya’s institutions and advancing a path to national elections, as well as ongoing diplomatic efforts toward a lasting resolution in Western Sahara. We also discussed securing a humanitarian truce and related peace efforts in Sudan, advancing durable peace in the Great Lakes region, as well as promoting stability in Ethiopia.

Appreciate the opportunity to chat with @jessecordweber and @KellieMeyerNews on @NewsNation to preview the summit between @POTUS and China's Xi Jinping. On issues from AI to chips to Taiwan to human rights, the CCP hasn't given us any reason to believe they're trustworthy.