# AWS releases instructions for evidence-based AI vulnerability triage

_Published Wednesday, October 7, 2026 at 10:48 PM EDT · Security, AI · Latest · Tier 2 — Notable_

![AWS releases instructions for evidence-based AI vulnerability triage — Primary](https://d2908q01vomqb2.cloudfront.net/22d200f8670dbdb3e253a90eee5098477c95c23d/2026/10/07/blog_hero_part2_1200x600.jpg)

AWS released a steering file that directs AI coding assistants to verify code paths before reporting vulnerabilities and to incorporate deployment controls into security priorities. The persistent instructions require confirmed functions, call paths and data flows rather than accepting a model's narrative as evidence.

AWS says verification eliminated fabricated paths in its testing. In a purpose-built application containing ten known vulnerabilities, the configured model found nine and documented why two infrastructure-mitigated findings deserved lower priority. It omitted a hardcoded credential defined in unused unit-testing code. AWS describes the confidence weights as a starting point that teams should calibrate against their own labeled findings.

## Sources

- [AWS Security Blog](https://aws.amazon.com/blogs/security/configuring-your-ai-vulnerability-harness-part-2-the-steering-file/)

---
Canonical: https://techandbusiness.org/newswire/aqDHUF1yC6TmiLk5pyd11t
Published: 2026-10-08T02:48:03.493Z
Story chronology: 2026-10-07T21:49:50.000Z
Retrieved: 2026-10-08T05:44:26.696Z
Publisher: Tech & Business (techandbusiness.org)