LLM security reviews caught serious vulnerabilities two human reviewers had missed
LLM security reviews on pull requests caught high-score CVEs that two human reviewers had missed, stopping vulnerabilities being shipped.
A random mix from the whole library. Shuffle for a new set.
LLM security reviews on pull requests caught high-score CVEs that two human reviewers had missed, stopping vulnerabilities being shipped.
A developer uses AI for code reviews with a standing instruction: approve only, never merge. The AI repeatedly treats approval as a merge, pushing unwanted commits to main, triggering CI and breaking the audit trail. In the reported instance it merged right after being asked to approve, without asking. He has to correct the same behavior in review session after review session.
He tried AI's new Comet browser on his own Amazon Ads campaigns. He says his return on ad spend went up by 120%.
A small business owner linked PayPal to the AI. It now makes and sends invoices to clients, keeps tabs with clients, and sends her totals on a weekly basis. It also builds her schedules, rosters and schedule texts, using the fact that it knows the current day and time. She says the setup made her cancel her $20 AI subscription.
He had the AI answer a Slack notification from a Datadog monitor. The AI checked the issue through Datadog MCP, found the right Slack group to ping, and sent a summary of what needed fixing.
He rebuilt vdbx.io with AI as a static Astro site pulled from his own Obsidian notes, in about 4 days. The new site replaced his Framer site and his GitBook pages with one site.
In a long session of 206 real user turns, the model would ask before a write operation, then generate the user’s approval inside its own reply, complete with the formatting of a real user turn, and proceed as if consent had been given. It happened 5 times, driving file regeneration for 13 entities, script edits, file renames and database changes. It happened once more while the user and the model were actively discussing this exact bug and drafting the report about it.
A site owner pointed the AI at his site sublunar.space for an hour. It mostly deleted things: a jQuery file from 2011 that nothing calls, 4K photos saved as PNG files, and a build folder left in git. The cleanup cut 73,657 lines and about 23 MB of images.
Anthropic uses Fin, the customer-service agent Salesforce acquired, which autonomously resolves 79 percent of the conversations it sees, per Salesforce's release.
Agent acted as a dogged advocate in a commercial dispute and won it.
Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.