CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance
CyberDual
Researchers introduce CyberDual, an evaluation arena where attacker AI agents hide exploitable bugs in open-source software maintenance tasks while reviewer AI agents attempt to find and fix them. Execution of proofs of concept determines the outcome of each match.
why this severityResearch paper demonstrating AI-driven vulnerability introduction and review.
- first report
- 27 Oct 2026
- last update
- 27 Oct 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-10-27CyberDual: AI Attackers versus AI Code Reviewers in Real Software MaintenancearXiv · arxiv.org/abs/2610.34435
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- AI-enabled attack
- categories
- AI-generated malwareAI-assisted intrusion
- severity
- 1 · Research / proof of concept
- targets
- Framework / tooling
- owasp llm top 10
- no entry for these categories
- dates
- happened 27 Oct 2026 · first reported 27 Oct 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-10-27 09:09Z · updated 2026-11-11 00:12Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance https://gcdradar.vercel.app/incidents/cyberdual-ai-attackers-versus-ai-code-reviewers-in-real-soft · AIR-2026-1560 · closed 2026-11-10 - Lane: Research - Severity: 1 (Research / proof of concept): Research paper demonstrating AI-driven vulnerability introduction and review. - Fix status: Fix status unknown - First reported: 2026-10-27 - AI role: AI-enabled attack - Products: CyberDual ## Summary Researchers introduce CyberDual, an evaluation arena where attacker AI agents hide exploitable bugs in open-source software maintenance tasks while reviewer AI agents attempt to find and fix them. Execution of proofs of concept determines the outcome of each match. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-10-27: CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance (https://arxiv.org/abs/2610.34435) ## Sources - 2026-10-27 arXiv: CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance https://arxiv.org/abs/2610.34435 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveOpenAI model OpenAI model generates 948 Linux root exploits in automated run
Research · since Oct 2026 (approx.)
AI - closedVELA benchmark The Agent in the Middle: How AI-Mediated Access Reshapes Web Vulnerability Exploitation
Research · since 27 Oct 2026
AI - closedClaude Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns
Breaches & attacks · Exploited · since 27 Aug 2025
AI - closedLAMEHUG LAMEHUG Malware Integrates LLM for Real-Time Command Generation
Breaches & attacks · Exploited · since 10 Jul 2025
AI - closedClaude Anthropic Report Reveals Claude Misuse in Cyberattacks and Fraud
Breaches & attacks · Exploited · since 23 Apr 2025
AI - closedXanthorox AI Darknet Forum Introduces Xanthorox AI Autonomous Cyberattack Platform
Research · since 7 Apr 2025
AI