L'IA "Claude Mythos" d'Anthropic révèle plus de 1000 failles logicielles critiques
Read, Watch or Listen
United States-based AI company Anthropic has disclosed that its new cybersecurity initiative, Project Glasswing, used its specialized Claude Mythos model to conduct one of the largest automated security audits yet performed by a large language model. Launched last month with a cohort of 50 cybersecurity partners, the project used the frontier AI system to scan widespread, widely used open-source codebases and identified more than 10,000 potential security vulnerabilities in critical software systems worldwide. Data released by Anthropic shows that 6,202 of the initially flagged issues were categorized as high- or critical-severity flaws, and subsequent verification confirmed 1,726 of these as true positive vulnerabilities. Among the validated findings, 1,094 were assessed as posing high or critical risks to global infrastructure and essential software components across more than 1,000 distinct open-source projects. United States security researchers working with Anthropic report that Project Glasswing was designed to address systemic software weaknesses by giving security teams a specialized interface to the Claude Mythos model, which is tuned to analyze massive codebases for flaws that conventional manual audits might miss. Anthropic stated that the initiative aims to support faster and more efficient patching cycles by surfacing serious issues in standard software libraries and the broader software supply chain. The company and its partners are now transitioning into a remediation phase, coordinating with maintainers to deploy patches for the confirmed vulnerabilities. Anthropic has not yet released a full list of affected software packages, saying it will withhold detailed names to reduce the risk that malicious actors exploit the flaws before security updates are in place.
Prepared by Jonathan Pierce and reviewed by editorial team.
Timeline of Events
- Le mois dernier, l'initiative de cybersécurité du projet Glasswing a été lancée
- Le mois dernier, Claude Mythos a commencé à analyser les dépôts
- Le mois dernier, plus de 10 000 vulnérabilités potentielles ont été identifiées
- Le mois dernier, 6 202 problèmes ont été signalés comme critiques ou de haute priorité
- Récemment, 1 726 vulnérabilités ont été confirmées comme de vrais positifs
- Récemment, 1 094 problèmes ont été classés comme critiques ou de haute priorité
- Récemment, les conclusions portent sur 1 000 projets open-source
- Aujourd'hui, Anthropic divulgue publiquement les résultats du projet
Why This Matters to You
Votre sécurité numérique est en jeu. Les failles découvertes par le Projet Glasswing pourraient affecter des logiciels que vous utilisez quotidiennement. En attendant la sortie des correctifs, soyez extrêmement vigilant. Mettez régulièrement à jour vos logiciels et utilisez des mots de passe forts et uniques.
The Bottom Line
Cet audit basé sur l'IA change la donne en matière de cybersécurité. Il aide à identifier et à corriger les vulnérabilités plus rapidement que jamais. Mais n'oubliez pas qu'aucun système n'est infaillible. Restez proactif dans la protection de votre vie numérique. Vaut la peine d'être transmis si vous connaissez quelqu'un qui n'est pas un expert en technologie.
- Articles Published:
- 1
- Right Leaning:
- 0
- Left Leaning:
- 0
- Neutral:
- 1
- Distribution:
- Left 0%, Center 100%, Right 0%
Non spécifié dans la source.
Non spécifié dans la source.
Coverage of Story:
From Left
No left-leaning sources found for this story.
From Right
No right-leaning sources found for this story.
Comments