[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-study-finds-ai-coding-guardrails-easily-bypassed":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},6343,"study-finds-ai-coding-guardrails-easily-bypassed","Study Finds AI Coding Guardrails Easily Bypassed","A new benchmark called CS-Guard shows most safety filters for AI-generated code fail against jailbreaks, letting malware requests through most of the time.","A new benchmark finds that most guardrails meant to stop AI coding assistants from writing malware barely work.\n\nResearchers built CS-Guard, the first benchmark to systematically test guardrails for code-generation security. It combines 1,000 malware-generation prompts run through 7 jailbreak techniques plus a new \"fictional scenario attack\" that hides malicious intent inside a fake software-development story, alongside 331 code-to-code tests covering infilling, completion, and translation. The team ran nine guardrails across seven LLMs. For text-to-code requests, jailbreaks pushed the average attack success rate to roughly 50% for many guardrails; for code-to-code tasks, success rates approached 100% on unprotected models and still ranged from 14.4% to nearly 100% with guardrails active, and the fictional-scenario attack alone hit close to 100% success across many of them.\n\nMost AI safety marketing focuses on chatbot conversations, not the code-generation pipelines now wired into IDEs and CI systems. This benchmark suggests the guardrails bolted onto coding tools lag well behind those built for plain text, and that feeding a model existing code to translate or complete is a far easier way to smuggle malicious logic past filters than simply asking for it.\n\nThe paper's actual contribution is a public, modular benchmark rather than a solution, which is a polite way of saying nobody has a good answer yet.","[\"ai\",\"security\",\"code-generation\",\"jailbreaks\"]","2026-09-11T04:00:00.000Z","2026-09-11T07:23:17.014Z","2026-09-11T07:23:28.902Z","published",null,[],"security",[26,24,27,28],"ai","code-generation","jailbreaks",[30],{"name":31,"url":32},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.09798",0,{"sections":35},[36,39,42,46,51,56,61,64,69,73,78,83,88,93],{"name":37,"slug":26,"count":38,"latest_published_at":18},"AI",3521,{"name":40,"slug":24,"count":41,"latest_published_at":18},"Security",637,{"name":43,"slug":44,"count":45,"latest_published_at":18},"Policy","policy",338,{"name":47,"slug":48,"count":49,"latest_published_at":50},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Hardware","hardware",153,"2026-09-09T15:12:32.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Consumer Tech","consumer-tech",99,"2026-09-09T17:27:33.000Z",{"name":62,"slug":63,"count":59,"latest_published_at":18},"Science","science",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Software","software",75,"2026-09-10T20:41:21.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":18},"Dev Tools","dev-tools",70,{"name":74,"slug":75,"count":76,"latest_published_at":77},"Startups","startups",55,"2026-09-09T23:14:29.000Z",{"name":79,"slug":80,"count":81,"latest_published_at":82},"Gaming","gaming",43,"2026-09-10T12:18:06.000Z",{"name":84,"slug":85,"count":86,"latest_published_at":87},"General","general",41,"2026-09-08T01:57:23.000Z",{"name":89,"slug":90,"count":91,"latest_published_at":92},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":94,"slug":95,"count":96,"latest_published_at":97},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]