Gecko’s (@gecko_sec) AI SAST scanner found 30+ zero-day vulnerabilities in major open source projects that no AppSec tool found. Here’s how they did it: https://t.co/vYObKNdLKn
10
7
68
Replies
@ycombinator @gecko_sec Yo @ycombinator they are copying them from other companies. https://t.co/EmGGpCsoKg
Hi, does anyone here have a contact at @ycombinator? cc @paulg Quick context: @FuzzingLabs developed an open-source, AI-driven fuzzing tool that discovered a number of significant vulnerabilities which we disclosed publicly. A competing team backed by YC, @gecko_sec, has since
0
0
18
@ycombinator @gecko_sec AI-driven SAST tools may be uncovering a blind spot in traditional AppSec, potentially signaling a shift in vulnerability discovery.
0
0
1
@ycombinator @gecko_sec This the company that just got caught stealing other people’s work and claiming it as their own…?
0
0
3
@ycombinator @gecko_sec Wild to see AI catching things that slipped past all the usual tools. Gets me thinking what else we're missing in open source. The bar keeps rising.
0
0
0
@ycombinator @gecko_sec Wow, that's impressive! Zero-days are no joke. Curious to see how their approach differs from others.
0
0
0