Cloudflare tests Mythos against 50+ repositories, highlights its ability to chain bugs into a single exploit, and details a vulnerability discovery harness
Cloudflare Grant Bourzikas
Related Coverage
- AI might cut false positives, but it won't stop the slop CyberScoop · Djohnson
- Mythos Is Not The Threat: Your Definition Of Risk Is Forbes · Aditya Vikram Kashyap
- Project Glasswing: what Mythos showed us Hacker News
Discussion
-
@dinodaizovi
Dino A. Dai Zovi
on x
This, 1M% this: “The principle is to make exploitation harder for an attacker even when a bug exists, so that the gap between when a vulnerability is disclosed and when it is patched matters less. That means defenses that sit in front of the application and block the bug from
-
@kr0der
Anthony Kroeger
on x
good read here by Cloudflare - they used Mythos against their own repositories to find security vulnerabilities. i read it and thought these 2 main points were interesting: 1. Mythos vs other frontier models - Frontier models could find a lot of the individual bugs, but a lot
-
@cloudflare
@cloudflare
on x
Cloudflare's security team spent the last few weeks testing Anthropic's Mythos against fifty of our own repositories. What we learned about offensive AI, why faster patching is the wrong reaction, and what the architecture around vulnerabilities has to look like next.
-
@dan_jeffries1
Daniel Jeffries
on x
Finally a semi-useful read on Mythos that is free of myth and talks about what this means more practically (not this is the end of the world as we know it, but how do we deal with faster patches and attacks from AI as other models scale to chained exploits)? This is the kind of
-
@samuelcolvin
Samuel Colvin
on x
Reading this, the bun rewrite to rust makes much more sense. My guess: Mythos looked at bun and had a shit fit - generated a deluge of vulnerabilities and memory bugs so vast and profound that they would be effectively impossible to fix in zig. Anthropic looked at the report
-
@zackkorman
Zack Korman
on x
Cloudflare is right about this. You're not going to be able to patch fast enough, but you can build your systems so that the vast majority of vulnerabilities don't matter. If you've not done that, you're going to have a bad time. [image]
-
@rekdt
@rekdt
on x
It's really funny watching companies learn things like patching at high velocity isn't a cybersecurity silver bullet The state of cybersecurity is so bad in tech today, they're recreating defense in depth from first principles
-
@dok2001
Dane Knecht
on x
Mythos and other frontier models, pointed at live code across critical Cloudflare infrastructure. An honest read on what's working and what comes next. https://blog.cloudflare.com/ ...
-
Anuk Fernando
Anuk Fernando
on linkedin
AI has officially entered its “Senior Security Researcher” era. Cloudflare's security team recently spent weeks testing Anthropic's new Mythos Preview against 50+ of their own code repositories. …
-
Grant Bourzikas
Grant Bourzikas
on linkedin
Mythos is the first real step into agentic AI for security, and the direction is hard to miss. As part of Project Glasswing …