gcdRadar
archive/Research/AIR-2026-1560
closedclosed 10 Nov 2026Research1 Research / proof of conceptAI

CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance

CyberDual

Researchers introduce CyberDual, an evaluation arena where attacker AI agents hide exploitable bugs in open-source software maintenance tasks while reviewer AI agents attempt to find and fix them. Execution of proofs of concept determines the outcome of each match.

why this severityResearch paper demonstrating AI-driven vulnerability introduction and review.

first report
27 Oct 2026
last update
27 Oct 2026

Timeline · 1

  1. 27 Oct 2026CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance

Sources · 1

Research and catalogues

  1. 2026-10-27

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI-generated malwareAI-assisted intrusion
severity
1 · Research / proof of concept
targets
Framework / tooling
owasp llm top 10
no entry for these categories
dates
happened 27 Oct 2026 · first reported 27 Oct 2026
origin
News & research feeds
record
confidence 0.90 · created 2026-10-27 09:09Z · updated 2026-11-11 00:12Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance

https://gcdradar.vercel.app/incidents/cyberdual-ai-attackers-versus-ai-code-reviewers-in-real-soft · AIR-2026-1560 · closed 2026-11-10

- Lane: Research
- Severity: 1 (Research / proof of concept): Research paper demonstrating AI-driven vulnerability introduction and review.
- Fix status: Fix status unknown
- First reported: 2026-10-27
- AI role: AI-enabled attack
- Products: CyberDual

## Summary

Researchers introduce CyberDual, an evaluation arena where attacker AI agents hide exploitable bugs in open-source software maintenance tasks while reviewer AI agents attempt to find and fix them. Execution of proofs of concept determines the outcome of each match.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-27: CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance (https://arxiv.org/abs/2610.34435)

## Sources

- 2026-10-27 arXiv: CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance https://arxiv.org/abs/2610.34435

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    AI
  2. closed
    AI
  3. closed
    Claude Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns

    Breaches & attacks · Exploited · since 27 Aug 2025

    AI
  4. closed
    LAMEHUG LAMEHUG Malware Integrates LLM for Real-Time Command Generation

    Breaches & attacks · Exploited · since 10 Jul 2025

    AI
  5. closed
    Claude Anthropic Report Reveals Claude Misuse in Cyberattacks and Fraud

    Breaches & attacks · Exploited · since 23 Apr 2025

    AI
  6. closed
    AI