Spark Uncovers Vulnerability in WolfSSL During Beta Testing

BONN, Germany, Jan. 9, 2025 /PRNewswire/ -- Code Intelligence, the pioneer in AI-automated software testing, today announced the launch of Spark, the first AI test agent that autonomously identifies bugs in unknown code without human interaction. It's the first AI Agent to find a real-world vulnerability by automatically generating and running a test for a widely used open-source software.

http://mma.prnewswire.com/media/2592670/Code_Intelligence_Logo.jpg

Spark is designed to fully automate software testing, from identifying bugs early in the development process to their actual remediation, drastically lowering the entry barrier to advanced security testing technologies like white-box fuzz testing. When testing software, for a codebase with 100.000 lines of code, it saves up to 1.000 hours of manual effort.

During its final beta testing, Spark uncovered a vulnerability in WolfSSL, an open-source cryptography library widely used in developing embedded devices and IoT systems. The only human involvement was launching a single command to run the AI Test Agent; analyzing the code, generating a relevant test case, and running it was done autonomously. The vulnerability, a heap-based use-after-free, could lead to unexpected behavior, crashes, or security exploits. The WolfSSL team resolved the issue immediately and released a new version with the fix in late December 2024.

"The uncovered real-world vulnerability proves that AI can effectively take over manual tasks in software testing, such as analyzing code, identifying the most likely attack vectors, generating and running tests, and can thereby yield great results," said Eric Brueggemann, CEO of Code Intelligence. "Next, we will focus on going even further by automatically fixing any uncovered bugs. This means the entire software testing process - from creating tests to bug remediation - will be completed in minutes without human interaction. However, humans will continue to make the final decisions. We will provide automatically generated pull requests with a proven fix."

"We were truly impressed by the abilities of Spark to enhance our fuzz testing workflows," says Andreas Lackner, Senior Software Development Engineer at Vector Informatik. "By reducing the manual effort for creating and integrating fuzz tests, we are able to bring our cycle time down and further improve the quality of our embedded software."

Code Intelligence will host an official launch event for its AI Test Agent on January 28, featuring security and software development experts from companies like Continental and Mozilla. Register here.

Media contact:
Dustin Rausa
dustin.rausa@code-intelligence.com
+1 203-470-0251

Logo -

View original content:https://www.prnewswire.co.uk/news-releases/code-intelligence-launches-spark-its-ai-test-agent-that-autonomously-uncovers-vulnerabilities-without-human-interaction-302345563.html

Images

Tags

More Like This

Secure Code Warrior Launches Industry-First AI Traceability to Enable Secure Developers and Supercharge Safe Productivity

Secure Code Warrior Launches Trust Agent: AI to Enable Safe, Scalable AI-Driven Development

LambdaTest Unveils the World's First Platform to Test AI Agents: Introducing Agent-to-Agent Testing

LambdaTest introduces KaneAI: The first end-to-end AI test agent, pioneering a new era in quality engineering

AI-Generated Code Poses Major Security Risks in Nearly Half of All Development Tasks, Veracode Research Reveals

YesWeHack Launches Agentic Pentest for AI Security Testing

Sauce Labs Introduces Sauce AI for Insights: Purpose-Built AI Agents That Transform Software Quality Data Into Instant Engineering Intelligence

95% of Enterprises Prioritize Pentesting, Yet Only 32% of Attack Surfaces Are Tested, New Synack and Omdia Research Finds