[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-ai-model-pinpoints-vulnerable-code-lines-not-just-files":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},11126,"ai-model-pinpoints-vulnerable-code-lines-not-just-files","AI Model Pinpoints Vulnerable Code Lines, Not Just Files","A new dual-channel AI framework called DCVD finds vulnerable functions and flags the exact line, outperforming prior detection methods in tests.","A new AI framework can tell you not just that your code has a bug, but exactly which line it is hiding on.\n\nResearchers describe DCVD, short for Dual-Channel Cross-Modal Vulnerability Detection, in a paper on arXiv. The system runs two parallel branches over a function: one tracks control-dependency structure, the other captures semantic meaning. It aligns the two using contrastive learning and bidirectional cross-attention, then trains with explicit supervision at both the function level and the individual statement level. On a large-scale real-world vulnerability benchmark, the authors report it beats existing state-of-the-art methods at both jobs: flagging vulnerable functions and localizing the specific line. The code is open-source on GitHub.\n\nMost vulnerability scanners stop at \"this function looks suspicious,\" leaving a security engineer to read line by line until they find the actual problem. That triage step is often the expensive part, not the initial flag. By fusing structural and semantic signals and training directly on line-level labels instead of treating localization as a guess derived from function-level output, DCVD is aimed squarely at cutting that manual search down.\n\nIt is worth remembering this is a benchmark paper, not a shipped tool. \"Outperforms state-of-the-art\" on a curated dataset is a lower bar than surviving contact with a sprawling, inconsistently documented production codebase. Whether DCVD's line-level accuracy holds up outside its test set is the question that decides if this becomes something security teams actually use, or just another entry in the vulnerability-detection literature.","[\"vulnerability-detection\",\"ai-security\",\"static-analysis\",\"open-source\"]","2026-10-09T04:00:00.000Z","2026-10-10T07:23:02.739Z","2026-10-10T07:23:08.012Z","published",null,[],"security",[26,27,28,29],"vulnerability-detection","ai-security","static-analysis","open-source",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2605.11015",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",6838,"2026-10-09T17:00:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",940,"2026-10-09T15:36:29.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",490,"2026-10-09T14:25:43.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",483,"2026-10-09T11:20:39.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",233,"2026-10-09T16:07:54.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Science","science",195,"2026-10-09T11:00:57.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",183,"2026-10-09T14:50:57.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Startups","startups",119,"2026-10-09T15:02:30.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Software","software",114,"2026-10-08T17:57:01.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Dev Tools","dev-tools",109,"2026-10-09T13:03:48.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"General","general",68,"2026-10-09T16:09:08.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Gaming","gaming",59,"2026-10-09T11:43:43.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",34,"2026-10-08T14:00:22.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]