Mandiant’s AI agents unearth 100+ critical flaws in stolen code in two days

On August 19, 2026, the Google Threat Intelligence Group detailed AVDH, an AI-agent harness Mandiant has run for ten months to audit source code, which validated more than 100 critical flaws in two days on stolen corporate repositories. For defenders, it is the demonstration that manual code review can no longer keep pace with AI — and that a well-built harness can rebalance the fight.