Microsoft Research and CMU release SecureVibe training recipe for more secure vibe coding
lileics · x · 2026-10-28
微软研究院与 CMU 联合发布论文《SecureVibe: Making Vibe Coding More Security》。研究发现功能正确但不安全的编码 agent,对功能需求背后的隐藏安全风险做有效规划与测试的概率不到一半。为此 SecureVibe 构建了显式针对安全规划与测试的训练方案:在含 4 个安全任务的安全套件上做 SFT,再用 SecureViberl(可执行反馈的 RL)与 SecureVibehg(基于提示的自监督)增强。
More from coding & agent
- The legendary fake Go generics: Unicode Canadian Syllabics as angle brackets — rickasaurus · 2026-10-28
- Microsoft Agensh board: a coding agent's "tests passed" is just a message — shoumikgoswami · 2026-10-28
- Ollama and FriendliAI to Host Seoul Meetup on Building Production Agents with Open Models — ollama · 2026-10-28
- theo: If Your Product Requires a Dashboard, Claude Will Just Rebuild It — sull · 2026-10-28
- Magic Patterns' first engineer: Cursor in Slack, a Patterson review agent, repo clones over worktrees — Y Combinator Blog · 2026-10-28
- Dev builds AI job-search app for his wife, she lands a job, and he open-sources it — CurieuxExplorer · 2026-10-28