Apple has officially released the security log for the Safari browser update 26.6.1. According to a report by the tech media site 9to5Mac, this update fixes 22 CVE security vulnerabilities related to WebKit. Among these vulnerabilities, nine were discovered and assisted in resolving by OpenAI's security technology, accounting for about 41%.
The key tool that played a significant role in vulnerability discovery is OpenAI Codex Security. This is an AI application security agent specifically designed for engineering and security teams. The agent can deeply analyze the code context and threat models of projects, automatically detect, verify, and fix complex code security vulnerabilities. Its core advantage lies in significantly reducing false positives and effectively alleviating the workload on technical personnel caused by security alerts. In addition to the OpenAI team, contributors to this vulnerability fix also include several security organizations and teams such as Out of Bounds, Cisco Talos, Citadelo, TrendAI Zero Day Initiative, Calif.io, and Braze Security Team.
Looking at the specific repair content, this vulnerability mainly involves attackers triggering Safari to crash through maliciously constructed web content, leading to process crashes or termination, and even causing serious memory damage. In the official announcement, two vulnerabilities that may directly cause memory damage are clearly listed. Additionally, there is a vulnerability related to WebKit History, which poses a risk of leaking sensitive data when users visit malicious websites. This update comprehensively addresses these security risks, further protecting user browsing privacy and device stability.
