[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUeAHd1OHW7hPNjL_ZfBrJbN9hZbeQ9CMN0lrL9_jeCU":3},{"article":4,"iocs":51,"watch_terms":52,"solutions":53,"lesson":139},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"20ca4b23-39b2-4a70-8ff6-e0e24f4b62d7","DARPA Selects Xint to Use AI in Securing Military Messaging Apps","darpa-selects-xint-to-use-ai-in-securing-military-messaging-apps-dc8fed","The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could also help commercial customers secure their software. The post DARPA Selects Xint to Use AI in Securing Military Messaging Apps appeared first on SecurityWeek.","DARPA has chosen Xint to research and develop AI-driven application security for analyzing military messaging apps. Xint's technology, which won the AIxCC competition, will examine source code and compiled binaries to identify and patch vulnerabilities, aiming to secure Department of War communications and enhance software supply chain risk assessment.","DARPA selects Xint to use AI for securing military messaging app code and binaries.","https:\u002F\u002Fwww.securityweek.com\u002Fdarpa-selects-xint-to-use-ai-in-securing-military-messaging-apps\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FDARPA-Technology.jpg","2026-09-29T17:24:04+00:00","2026-09-29T18:00:51.184682+00:00",7,[17,20,22,25],{"name":18,"type":19},"Xint","vendor",{"name":21,"type":19},"Theori",{"name":23,"type":24},"Signal","product",{"name":26,"type":27},"LLM","technology","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":28,"icon":30,"name":31,"slug":32},null,"AI Security","ai-security",[34,39,44,49],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":45},{"id":46,"icon":30,"name":47,"slug":48},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":50},{"id":28,"icon":30,"name":31,"slug":32},[],[18,21,23],{"controls":54,"vendors":138},[55,84,109],{"slug":56,"name":57,"problem":58,"products":59},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":32,"name":85,"problem":86,"products":87},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[88,96,101],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":97,"product_name":98,"url":99,"description":100},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"slug":110,"name":111,"problem":112,"products":113},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[114,122,130],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",[],{"slug":140,"title":141,"body":142,"framework_refs":143,"framework_notes":152},"ai-driven-security-research-targets-vulnerabilities-in-military-messaging-apps","AI-Driven Security Research Targets Vulnerabilities in Military Messaging Apps","DARPA's selection of Xint highlights growing concerns about vulnerabilities in military-grade messaging applications and the broader software supply chain that supports national security communications. Traditional manual code review is too slow and incomplete to keep pace with modern threat actors, leaving critical communications infrastructure exposed. AI-assisted analysis of both source code and compiled binaries represents a significant leap forward in identifying flaws before adversaries can exploit them. This initiative underscores that even the most sensitive government software ecosystems require continuous, automated vulnerability discovery to remain resilient. Failure to proactively identify and remediate such weaknesses in military communications could have catastrophic operational and national security consequences.",[144,145,146,147,148,149,150,151],"NIST SP 800-161 (Supply Chain Risk Management)","NIST SP 800-53 SA-11 (Developer Security Testing)","NIST SP 800-53 SA-15 (Development Process, Standards, and Tools)","CIS Control 16 (Application Software Security)","CIS Control 2 (Inventory and Control of Software Assets)","NIST CSF ID.SC-3 (Supply Chain Risk Management)","DoD CMMC Level 2\u002F3 (Software Supply Chain)","NIST SP 800-218 (Secure Software Development Framework - SSDF)",{"DoD CMMC Level 2\u002F3 (Software Supply Chain)":153,"CIS Control 16 (Application Software Security)":154,"NIST SP 800-161 (Supply Chain Risk Management)":155,"NIST CSF ID.SC-3 (Supply Chain Risk Management)":156,"NIST SP 800-53 SA-11 (Developer Security Testing)":157,"CIS Control 2 (Inventory and Control of Software Assets)":158,"NIST SP 800-218 (Secure Software Development Framework - SSDF)":159,"NIST SP 800-53 SA-15 (Development Process, Standards, and Tools)":160},"CMMC requires defence contractors to manage software and supply chain security, relevant for military messaging tools.","Application software security practices include code analysis that scales beyond slow manual review.","Supply chain risk management applies to the software supporting military messaging, where hidden flaws can compromise national security.","Supply chain risk management processes identify and assess suppliers of software used in sensitive communications.","Developer security testing, including AI-assisted analysis like Xint's, finds flaws in messaging apps that manual review misses.","Knowing which software components are in use helps target AI-driven analysis at the parts of messaging apps that matter.","The SSDF calls for systematic vulnerability discovery in software, which AI-driven research aims to scale.","Defined development processes and tools ensure security analysis is built into how military messaging software is built."]