Capital One released VulnHunter on Thursday — an open-source, agentic AI security tool that scans source code for exploitable vulnerabilities, maps attack paths, and proposes targeted fixes before code ships to production. Available on GitHub under an Apache 2.0 license, VulnHunter introduces what Capital One calls "attacker-first forward analysis" — a workflow that starts exactly where a real adversary would. The move is a philosophical 180 for a company still haunted by its...