{"data":{"id":"eaeeacb3-e29c-4f3f-97a7-274fa6a283d1","title":"Auditing in the age of (good enough) AI","summary":"Security firms are using AI agents not just for code review, but to build custom development tools that improve security audits. A security team used AI agents to build an LSP server (a tool that provides code editing features like autocomplete and navigation), a decompiler (a program that translates low-level code into more readable form), and formal verification tools (mathematical proofs of correctness) for the Miden VM, a new blockchain system, which helped them find serious bugs including an unvalidated input that could let attackers forge cryptographic signatures.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://blog.trailofbits.com/2026/09/18/auditing-in-the-age-of-good-enough-ai/","publishedAt":"2026-09-18T11:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Claude","Anthropic"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-18T11:00:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}