DARPA announced the seven finalists of the AI Cyber Challenge (AIxCC) at DEFCON 32. Of the nearly 40 teams with submissions, two of the finalist teams have ties to ACTION. Shellphish has their origins at UC Santa Barbara with Giovanni Vigna and many of the team members are current and former members of the UCSB SecLab. Team Atlanta is housed at Georgia Tech and has as members a number of PhD students advised by Wenke Lee.
Shellphish's Cyber Reasoning-System (CRS), ARTIPHISHELL, combines state-of-the-art research techniques from academia and industry to automatically find, understand, and patch vulnerabilities in open-source software.
Team Atlanta refers to their CRS, dubbed Atlantis, as "a next-generation, bug-finding and fixing system that can hunt bugs in multiple coding languages. The system immediately issues accurate software patches without any human intervention."
Read more about the two cyber reasoning systems in the links below.
Both Shellphish and Team Atlanta will return to Las Vegas in August 2025 for DEFCON 33. They'll test their upgraded systems for a chance at $4M in prizes.