Attackers are using AI to find #CICD flaws. Defenders can too.
This is a dev post classified by AGK Intelligence as Security (a tool drop), kept by the Dev Radar because it carries real work, not commentary.
Attackers are using AI to find #CICD flaws. Defenders can too. Barak Haryati, Senior Director of Product Security at JFrog, built RepoHunter to hunt exploitable workflows at scale. His research surfaced worm-like CI/CD attack patterns before they showed up in real-world incidents. At @owasp Global AppSec USA, he walks through how these attacks work and how you can pair static analysis with #AI reasoning to stop the next one. Add the session to your schedule: https://bit.ly/3WfVqDA #AppSec #OWASP #SoftwareSupplyChain
Posted by JFrog (23.3k followers) 3 h ago · 1 likes · 121 views · view the original post on X. Kept by the Dev Radar as Security.
More dev work like this
- Origin recently shared how it approaches protocol security. Here’s what that looks like… — @OriginProtocol
- The @plether_fi audit competition is live and will run until November 16! — @immunefi
- Shift your open source security from reactive to ready. — @RedHat
- Agents are already running in your environment. Some you approved. Some you have never… — @jetstream_sec
- A friend of mine shipped a free PDF app completely written by AI. Before I ran it, I… — @RayFernando1337
- Standard models often refuse to write the attacks you need to test against. — @BoundlessHQ
- 149 critical bugs found and confirmed on lending bug bounty programs on Immunefi. — @immunefi
- Today we are launching the newest Falcon Cloud Security innovations to protect the… — @CrowdStrike
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.3k posts from 5k X accounts over the last 21 days, 9.3k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-11-04 18:20 UTC. Full method.