Michael Brown
Summary: Trail of Bits has released Buttercup, its Cyber Reasoning System, as open source now that DARPA's AI Cyber Challenge (AIxCC) has officially ended. Buttercup competed in AIxCC's scored round against six other teams to find and patch the most software vulnerabilities, and Trail of Bits received a $1 million DARPA award in March 2024 as one of seven teams in the small business track.
Why it matters: An autonomous system built to find and patch vulnerabilities is now available to anyone, not just the seven DARPA-funded teams - which changes who can run vulnerability discovery at machine speed against your code.
Read the original at Trail of Bits Blog ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026