explainx / blog
July 21, 2026: Cisco Foundation AI open-weights Antares-350M and Antares-1B for local vulnerability localization, plus a 500-task VLoc Bench.
Jul 17, 2026
Moonshot promised full Kimi K3 open-source weights by July 27, 2026. Until then, use the API or self-host Kimi K2.7 Code. This guide maps realistic GPU tiers for a 2.8T MoE, vLLM and llama.cpp prep steps, and links to OpenCode local workflows — without claiming you can download K3 today.
Jul 24, 2026
A single crafted ChatGPT URL could silently create, authorize, publish, and schedule an attacker-controlled Workspace Agent that inherited the employee’s connectors. OpenAI removed the vulnerable parameter after Zenity’s report.
Jul 24, 2026
Researchers showed Claude Cowork local sessions could leave the Linux VM and read/write the entire Mac filesystem. The interesting part is four design choices — not only the pedit COW kernel bug in the chain.
On July 21, 2026, Cisco Foundation AI introduced Antares — compact security SLMs built for one expensive job: vulnerability localization (map a CWE or advisory to the files that likely contain the flaw).
Two sizes ship open-weight now: Antares-350M and Antares-1B. A 3B sibling is in the family but not the open drop. With them comes VLoc Bench — a 500-task agentic benchmark — and a clear thesis: small models with learned search can beat token-heavy generalists on this narrow task while keeping code on-prem.
| Question | Answer |
|---|---|
| What shipped? | Antares-350M + Antares-1B open weights |
| Who? | Cisco Foundation AI (Amin Karbasi et al.) |
| Task? | Vulnerability localization — ranked files + terminal trace |
| Bench? | VLoc Bench · 500 tasks · CWE-conditioned |
| Base models? | IBM Granite 4.0 checkpoints |
| Training? | SFT + GRPO (verifiable rewards on vuln repos) |
| 3B open? | Not in the July open drop |
| Replaces AppSec suite? | No — triage aid, not full toolchain |
Connecting public vulnerability knowledge (advisories, CWEs, databases) to your repo is slow: large trees, noisy signals, evidence scattered across files and call paths.
Static analysis helps but dumps triage debt. Frontier coding models can reason about code but are not optimized for security investigation + terminal navigation + structured localization. Antares aims at that middle ground.
Cisco’s own framing of the dual pressure: agents write more code and get better at exploiting it — so cheap, continuous verification has to sit close to the loop. Small local models are compelling because proprietary code never has to leave the machine.
| Step | Behavior |
|---|---|
| Start | Vulnerability description / CWE-style context |
| Search | Look for relevant patterns in the repo |
| Read | Inspect candidate files |
| Revise | Incorporate evidence; backtrack when a path is dead |
| Output | Ranked file list + terminal exploration trace |
Inspired by Cisco Foundation AI research that compact models can learn to search, reflect, revise, and backtrack — useful retrieval from strategy, not only from scale.
Workflows Cisco lists: CWE file localization, advisory-driven triage, augmenting SAST with model-driven exploration, early CI/CD review of likely vulnerable files, air-gapped / privacy-sensitive analysis.
| Benchmark family | Measures | Gap |
|---|---|---|
| SWE-Bench-class / CodeScout-style | Find code for a software issue | Not CWE/advisory localization |
| VLoc Bench | Navigate unfamiliar repos and recognize vuln patterns for CWE categories | Security-specific localization |
500 tasks. Agent must navigate efficiently and recognize vulnerability patterns. That is closer to how triage actually fails than “did the agent open the right file for a feature bug?”
Numbers below are from Cisco / model-card reporting on File F1 (higher is better). Always re-run on your harness.
| Model | Scale | File F1 (approx.) |
|---|---|---|
| GPT-5.5 (xhigh) | Frontier | 0.229 |
| Antares-3B (GRPO) | 3B | 0.223 |
| Antares-1B (GRPO) | 1B | 0.209 |
| GLM-5.2 | 753B-class | 0.186 |
| Gemini 3 Pro | Frontier | 0.152 |
| Antares-350M (GRPO) | 350M | 0.135 |
| Granite 4.0 1B (base) | 1B | ~0.000 |
explainx.ai read:
Cisco ties Antares to a broader Foundation AI story:
| Piece | Role |
|---|---|
| Foundry Security Spec | Model-agnostic blueprint for agentic security eval systems |
| CodeGuard | Secure-by-default rules/skills for coding agents |
| Antares | Compact models + benchmark for repo-level localization |
Compare to other Jul 2026 defender products we cover:
| Product | Angle |
|---|---|
| OpenAI Daybreak / Codex Security | Agentic defense workflows, gated cyber models |
| Claude Security | Anthropic public-beta security scanning |
| Antares | Open-weight, local, localization-first SLMs |
Different trust boundaries: Antares optimizes for keeping source inside your network; frontier cyber products optimize for capability under access programs.
| Team | Move |
|---|---|
| AppSec with air-gap rules | Pull Antares-1B; run VLoc-style tasks on an internal mirror |
| University / public-sector security | Prefer 350M/1B local over sending repos to APIs |
| Platform eng | Wire ranked-file output into existing triage queues — not as auto-close |
| Red/blue researchers | Read the technical report; compare against your CodeScout/SWE harnesses |
Sources: Cisco — Introducing Antares · Cisco Foundation AI technical report / Hugging Face model cards (Jul 21, 2026)
Benchmarks and cost figures reflect Cisco Foundation AI’s July 21, 2026 materials and model cards. Security tooling results vary by codebase and harness — do not treat File F1 as a substitute for your vulnerability management SLAs.
