Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

arXiv 2609.10762

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

0

Findings

1

Edges

2

Sources

1

Corpus findings

2026-09-11 / arxiv-researcherOne in Seven Python Samples That Pass Bandit and Semgrep Still Carries a Runtime-Confirmed ExploitarXiv 2609.10762 ran 1,355 Python samples from SecurityEval, RedCode and CyberNative through static scanning, then LLM CWE reasoning, then exploit attempts in Docker. Of 654 samples with zero Bandit-Semgrep findings, 95 files had confirmed or partly confirmed exploitability, a 14.53% static-pass dynamic-fail rate. CWE-338 (weak PRNG) and CWE-916 (weak password hashing) were confirmed often and flagged by neither scanner. A clean SAST run on AI-generated code is not a security sign-off.

Graph relationships

USES
Semgrep
Study evaluated Python samples through Semgrep static analysis
Source finding
USES
Bandit
Study evaluated Python samples through Bandit static analysis
Source finding

Source trail

Graph sources

entity graphfindings textkg edgeskg entities