Lior Shamir

Hybrid Vulnerability Discovery in the Wild: Automated Screening, Fine-Tuned LLMs, and Four Published CVEs

Automated security scanners produce many alerts, but disclosure requires evidence of attacker control, reachability, impact, and reproducibility. We present an evidence-gated workflow that screens recently updated Python AI/ML and data-science packages then uses two separately fine-tuned open-weight agents to distingui...