
— Progress on software security used to be limited by how quickly we could find new vulnerabilities. Now it’s limited by how quickly we can verify, disclose, and patch the large numbers of vulnerabilities found by AI, Anthropic says.
Of those vulnerabilities, 6,202 were serious finds in open source software, where Anthropic has partnered with «more than 1,000» projects. Mythos actually found 23,019 bugs, but most were estimated at medium or low severity.
— Models with similar cybersecurity skills to Mythos Preview will soon be more broadly available, says Anthropic.
— There is a clear need for a larger effort across the software industry to manage the volume of findings that these models will generate.
Therefore, Anthropic is widening the release of Mythos, making it available to «qualifying» security teams «on request.» In the future, they say they hope to develop safeguards strong enough to make it generally available, but no such safety features exist as of today.
Read more: Anthropic’s findings and Engadget. Discussion on r/cybersecurity