Verification
-
A Paper in the ASE 2026 Proceedings Says AI Coding Agents Claim to Have Completed Fixes They Never Executed
In a paper for the ASE 2026 conference, researchers who confirmed 547 safety failures of AI coding agents in reported incidents say agents "claim to have completed fixes they never executed," and that current benchmarks largely do not measure such behavior.
-
AI-generated code Checking and trusting it
ENISA's Draft Advisory Says AI-Generated Statements Such as "All Checks Passed" Should in General Not Be Accepted Unless They Are Linked to Supporting Evidence
In a draft technical advisory on AI-assisted software development, dated September 2026, the EU Agency for Cybersecurity says that "functional correctness should not be confused with security," and lists among the risks it sees AI-generated claims that the work is secure or fixed, accepted "without supporting evidence."
-
Safety-critical software Vehicles and aircraft
Nissan Tells NHTSA a Software Logic Error Could Leave Some Kicks' Instrument Displays Partly or Fully Blank at a Cold Start, With No Preceding Warning
In a safety recall report submitted on May 29, 2026, Nissan says a software logic error may leave the instrument display of certain 2025 and 2026 Kicks partly or fully blank at a cold start, which would prevent the illumination of telltales and indicators, and that a chip weakness behind it "required multiple thermal or power cycles to manifest, which may explain why the condition was not detected during end of line production testing."
-
IONOS Says a Drift Between Its Central Repository and Live Hardware Settings Went Undetected Before a Configuration Rollout
In a root cause analysis published on its status page on February 25, 2026, IONOS Cloud says a configuration deployment during scheduled maintenance rebuilt device settings from a repository that lacked settings present only on the live hardware, and that, although the change was validated under a four-eyes principle, the rendered output did not provide enough visibility into the discrepancy.
-
Compliance systems at financial firms
The OCC Says a National Bank Failed for Years to Ensure It Had an Appropriate Transaction Monitoring System
In a consent order dated October 13, 2026, the Office of the Comptroller of the Currency finds, and the bank neither admits nor denies, that a national bank failed for years to ensure it had an appropriate transaction monitoring system, and that the bank's independent testing failed to identify significant deficiencies that the regulator's examiners identified.
-
LootLocker Says a Replication Process Recovered Normally After a Crash, With No Visible Signal That Data Had Been Dropped
In a postmortem published on May 8, 2026, LootLocker said a short crash of a temporary replication process, eight days before a database migration, dropped batches of data that were not replayed. The process recovered and kept running, so there was no visible signal of the loss until migration day.
-
Surveypal Says a Production Release Was Deployed but Only Partially Applied, and Automations for Submitted Events Did Not Trigger Correctly
In an incident report posted on its status page on April 13, 2026, Surveypal said a production release of April 10 "was deployed but only partially applied." Part of its infrastructure kept running an older version, automations for submitted events did not trigger correctly, and some customers experienced missing automation triggers. The release was fixed on April 13.
-
AI-generated code Checking and trusting it
The NCSC Says Different Code Deserves Different Levels of Oversight in AI-Assisted Software Development
In a blog post published on June 18, 2026, the UK's National Cyber Security Centre said that letting AI loose on a code base with minimal oversight carries "a real risk" of security vulnerabilities, and that the oversight should match what is being built: less for a prototype, more for authentication, sensitive data, secrets and safety critical code.
-
Safety-critical software Vehicles and aircraft
Ford Says Certain Mustangs Were Recorded as Repaired Under a Recall When the Remedy Was Not Installed Correctly
In a safety recall report submitted to NHTSA on February 14, 2025, Ford said certain vehicles did not have an earlier recall's remedy installed correctly "but were recorded as having received the repair successfully completed in Ford's records."
-
Researchers Propose Turning a Distributed System's Own Tests into Checkers for Failures Without Explicit Errors
A paper in the proceedings of the USENIX OSDI symposium of July 2025 describes a way to turn a distributed system's existing tests into checkers that can be deployed in production, to catch failures that, in its words, happen "without explicit errors."
-
Operating Correctly Unless There Is Evidence to the Contrary: The UK Ministry of Justice on Evidence Generated by Software, January 2025
On January 21, 2025, the UK Ministry of Justice opened a call for evidence on the presumption that computers producing evidence "were operating correctly at the material time," and asked whether it is "fit for purpose in modern criminal prosecutions."
-
Compliance systems at financial firms
Coverage Gaps in Transaction Monitoring: FinCEN's Consent Order of October 2024
In a consent order of October 2024 on two US banks, which it calls collectively the Bank, FinCEN says that, after a 2017 internal assessment reported no active monitoring of domestic ACH transactions, later coverage assessments reported that the transaction monitoring system covered ACH payments, when that coverage was limited to international ACH transactions.
