Project
Google's continuous fuzzing service that automatically tests open-source software for bugs and security vulnerabilities at scale.
Anthropic's Claude flagged more than 29,000 candidate open source vulnerabilities in six months, and upstream projects have patched 516 of them. Maintainers praise the reports, but each fix still ships only as fast as the project that tests and releases it.
Reality
Anthropic announced a Critical Infrastructure Defense Program that pairs Claude with outside security firms, CrowdStrike among them. Alongside it, Anthropic is running a free, opt-in scanning service for open-source maintainers directly, CyberScoop reported.
Perspective Coverage
9 publishersReality
Anthropic's Cyber Mission puts Claude models, engineers and funding behind bug fixing, after Glasswing finds often waited months for a patch. Its free OSS Scanner sends unreviewed reports that Anthropic expects to be over 90% accurate, so it suits maintainers who have time to verify them.
Reality
Anthropic expects more than 90% of the unreviewed vulnerability reports its new OSS Scanner sends to open source maintainers to be real. Opt-in projects get findings faster and take on the work of catching the errors, such as wrong severity ratings.
Perspective Coverage
6 publishersReality
Anthropic has launched OSS Scanner, a free opt-in service that sends open-source maintainers AI vulnerability reports no human has reviewed. The triage Anthropic skips falls to maintainers, so downstream teams should expect more upstream findings that a person still has to confirm.
Reality
GitHub Security Lab's Fuzzing Taskflow gives an LLM agent one repo slug and has it write harnesses, read coverage and triage crashes for C/C++ projects. The model's build commands run on the host with no container, so the post says to use a disposable machine.
Reality
Anthropic says Claude Mythos Preview found and exploited previously unknown flaws in every major operating system and web browser during a month of testing. Its disclosure process keeps the rest unnamed until patches ship.
Reality
Discovery took 495,211 executions and ten hours forty-three minutes on a single machine. The two-line guard that fixes it was proposed on ffmpeg-devel in November 2024 and never landed on the path that mattered.
Reality