{
  "id": 17266042,
  "title": "AI-generated code is still frequently failing security checks — with Claude and GPT-6 topping the leader board",
  "url": "https://urgent.news/2026/10/30/ai-generated-code-is-still-frequently-failing-security-checks-with",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-30T18:10:00.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/security/ai-generated-code-is-still-frequently-failing-security-checks-with-claude-and-gpt-6-topping-the-leader-board"
  },
  "original_language": "en",
  "account": "AI-generated code security has seen a slight improvement for the first time in over a year, according to a new Veracode report. The vulnerability rate dropped from 44% to 38%, with top models like Claude Opus 5.5 and GPT-6-Sol performing well in preventing common flaws such as XSS attacks. However, complex security reasoning remains a challenge for AI-generated code. Researchers stress that AI-generated code still needs independent security testing and verification before deployment. While the overall security score improved from 56% to 62%, most of the progress was due to advancements in handling XSS flaws, which are relatively easy to fix through pattern recognition. The study analyzed 18 models across four programming languages and four Common Weakness Enumeration categories, finding that top models now score above 60%, a six percentage point increase from the previous report. However, the improvement is still limited, as the majority of AI-generated code still contains vulnerabilities, and the best models are more expensive, making them less scalable for widespread use.",
  "summary": "Progress is there, but it's mending a small part of a large wound.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 7,
    "also_reported_by": [
      {
        "outlet": "XDA Developers",
        "title": "Claude Code is the best Linux tech support I've ever had",
        "url": "https://urgent.news/2026/10/29/claude-code-is-the-best-linux-tech-support-ive-ever-had",
        "published": "2026-10-29T18:00:20.000Z"
      },
      {
        "outlet": "Dev.to",
        "title": "Claude keeps saying \"load-bearing\", compaction keeps eating my \"stop saying that\", so I built a tool with Claude Code that makes the correction stick",
        "url": "https://urgent.news/2026/10/30/claude-keeps-saying-load-bearing-compaction-keeps-eating-my-stop",
        "published": "2026-10-30T07:33:09.000Z"
      },
      {
        "outlet": "Channel News Asia",
        "title": "Cursor says up to 5,000 users affected by tampered Claude Code extension",
        "url": "https://urgent.news/2026/10/30/cursor-says-up-to-5-000-users-affected-by-tampered-claude-code",
        "published": "2026-10-30T08:32:32.000Z"
      },
      {
        "outlet": "Lobsters",
        "title": "Backdoors in Claude Code for VS, Cursor official extensions",
        "url": "https://urgent.news/2026/10/30/backdoors-in-claude-code-for-vs-cursor-official-extensions",
        "published": "2026-10-30T11:04:55.000Z"
      },
      {
        "outlet": "The Register Science",
        "title": "Anthropic: That Claude Code extension compromise… couldn't be us",
        "url": "https://urgent.news/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us",
        "published": "2026-10-30T16:27:00.000Z"
      },
      {
        "outlet": "Fast Company",
        "title": "Hackers hijacked a Claude Code extension, exposing yet another new AI security risk",
        "url": "https://urgent.news/2026/10/30/hackers-hijacked-a-claude-code-extension-exposing-yet-another-new-ai",
        "published": "2026-10-30T17:29:12.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}