[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVH4jnqK11Efo-SFPemY9lQdRw8q9jRkrWdRYWVpZh60":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":141},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"f53fdf5c-58ac-45e7-99aa-a66ab3b0b854","Cisco Launches Low-Cost AI Models for Source Code Security","cisco-launches-low-cost-ai-models-for-source-code-security-b17d28","The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models. The post Cisco Launches Low-Cost AI Models for Source Code Security appeared first on SecurityWeek.","Cisco has launched Antares, a family of small language models (SLMs) designed to efficiently identify known vulnerabilities in source code. These open-weight models aim to provide a cost-effective solution for organizations, particularly those with budget constraints, offering lower false positives than general open-weight models and reduced cost compared to large closed-source LLMs, while also supporting data sovereignty requirements.","Cisco releases Antares, low-cost AI models for source code vulnerability detection.","https:\u002F\u002Fwww.securityweek.com\u002Fcisco-launches-low-cost-ai-models-for-source-code-security\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002FAI-artificial-intelligence-model-frontier.webp","2026-07-21T17:44:33+00:00","2026-07-21T18:00:22.612946+00:00",7,[17,20,23,26,28,30],{"name":18,"type":19},"Antares","product",{"name":21,"type":22},"Cisco","vendor",{"name":24,"type":25},"SLM","technology",{"name":27,"type":25},"LLM",{"name":29,"type":19},"GPT-5.5",{"name":31,"type":22},"OpenAI","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":32,"icon":34,"name":35,"slug":36},null,"Tools","tools",[38,40,45],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[],[21,31,18],{"controls":53,"vendors":137},[54,83,110],{"slug":55,"name":56,"problem":57,"products":58},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":49,"name":84,"problem":85,"products":86},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":104,"vendor_name":21,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"slug":111,"name":112,"problem":113,"products":114},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":132,"product_name":133,"url":135,"description":136},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",[138],{"slug":104,"name":21,"logo_path":105,"roles":139},[140],"reported_by",{"slug":142,"title":143,"body":144,"framework_refs":145,"framework_notes":154},"ciscos-ai-powered-slms-aim-to-make-source-code-vulnerability-detection-accessible","Cisco's AI-Powered SLMs Aim to Make Source Code Vulnerability Detection Accessible","Cisco's release of the Antares family of small language models highlights a growing challenge: many organizations, especially those with limited budgets, lack effective tools to identify vulnerabilities in their own source code before deployment. Undetected code-level vulnerabilities remain a primary attack vector, often exploited long after introduction because manual code review is costly and inconsistent. The push toward affordable, data-sovereign AI models reflects the reality that large enterprises using expensive closed-source LLMs have had an unfair advantage in proactive vulnerability detection. Making these capabilities broadly accessible reduces the window of exposure for under-resourced organizations. This matters because a vulnerability left undetected in source code can cascade into systemic breaches affecting customers, supply chains, and regulatory standing.",[146,147,148,149,150,151,152,153],"CIS Control 16 – Application Software Security","NIST SP 800-218 – Secure Software Development Framework (SSDF)","NIST SP 800-53 SA-11 – Developer Testing and Evaluation","NIST SP 800-53 RA-5 – Vulnerability Monitoring and Scanning","OWASP SAMM – Secure Build and Deployment","ISO\u002FIEC 27001 A.14.2 – Security in Development and Support Processes","GDPR Article 25 – Data Protection by Design and by Default","NIST CSF DE.CM-8 – Vulnerability Scans Performed",{}]