Capital One Open Sources AI-Powered ‘VulnHunter’ Security Tool

Vulnerabilities

The agentic security tool identifies potentially exploitable code flaws, traces attack paths, and recommends targeted remediations.

By

FlipboardFlipboard

RedditReddit

WhatsappWhatsapp

EmailEmail

Capital One claimed that, when using VulnHunter internally, it was able to quickly and efficiently identify and remediate vulnerabilities across thousands of repositories, spanning tens of business areas.

For more than 15 years, Mike Lennon has been closely monitoring the threat landscape and analyzing trends in the National Security and enterprise cybersecurity space. In his role at SecurityWeek, he oversees the editorial direction of the publication and is founder and director of several leading cybersecurity industry conferences around the world.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

More from Mike Lennon

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security

SecurityWeek ICS Cybersecurity Conference Heads to Nashville for Special 25-Year Anniversary Edition

Cisco Moves to Acquire Astrix Security to Tackle Non-Human Identity Risks

Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks

Senate Confirms Joshua Rudd to Lead NSA and US Cyber Command

US Cyber Strategy Targets Adversaries, Critical Infrastructure, and Emerging Technologies

Zscaler Acquires Browser Security Firm SquareX

Latest News

Watch on Demand: Cloud & Data Security Summit

Hugging Face Hacked in Autonomous AI Attack

Chrome 150 Update Patches Severe Memory Safety Bugs

WP2Shell WordPress Vulnerabilities Exploited in the Wild

In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint

Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive

Beacon Security Raises $13 Million for Security Data Platform

Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Webinar: Why Email Security Keeps Failing (And What Has to Change)

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Virtual Event: 2026 Cloud Security Summit

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

Jazz has named Sean Robinson, Rickie Goyal, Danielle Guetta, Shani Nago, and Lior Magram as VPs and Michael Calev as COO.

AJ Shipley has been appointed Chief Product Officer at CrowdStrike.

Brinqa has named Ron Dovich as Chief AI and Automation Officer, David Allen as CTO, Steve Biagioni as CFO, and James Walta as VP of Product.

Legacy Systems, Real-World Impacts: The Reality of OT Security

Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts. (Tod Beardsley)

The Shift Toward Business-Aligned Risk Management

Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences. (Steve Durbin)

How to Conduct a Successful Audit of AI-Driven Software Development

As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production. (Matias Madou)

Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors

From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype. (Joshua Goldfarb)

The AI Token Costs That Can Break Cybersecurity

As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits. (Danelle Au)

FlipboardFlipboard

RedditReddit

WhatsappWhatsapp

EmailEmail