FORGE Lab uses agentic tools to identify memory safety issues in Rust

Summary

Microsoft's FORGE Lab found memory-safety bugs in Rust's standard library (std and core), including cases where safe Rust code can trigger undefined behavior. The team used Hyenas, its research version of codename MDASH, an AI-powered vulnerability-scanning system, to investigate three recurring patterns of misplaced trust in unsafe code. Two of the reported issues remained open at publication.

Topics

• AI agents

Related items

• MediumOn the hunt for ARTEX: understanding agentic attacks in AWS environmentsSame vendor · Datadog Security Labs
• MediumARTEX abuse expands as cybercriminals target financial sectorSame vendor · Microsoft Security Blog
• MediumThreat actors use agentic AI tooling to find and abuse exposed secretsSame vendor · Microsoft Security Blog
• MediumFake OpenAI, SpaceX events used to steal Microsoft, Google accountsSame vendor · BleepingComputer
• Info​​​​What’s new in Microsoft Security: November 2026Same vendor · Microsoft Security Blog