Discussion

• @dinodaizovi Dino A. Dai Zovi on x

  This, 1M% this: “The principle is to make exploitation harder for an attacker even when a bug exists, so that the gap between when a vulnerability is disclosed and when it is patched matters less. That means defenses that sit in front of the application and block the bug from

• @kr0der Anthony Kroeger on x

  good read here by Cloudflare - they used Mythos against their own repositories to find security vulnerabilities. i read it and thought these 2 main points were interesting: 1. Mythos vs other frontier models - Frontier models could find a lot of the individual bugs, but a lot

• @cloudflare @cloudflare on x

  Cloudflare's security team spent the last few weeks testing Anthropic's Mythos against fifty of our own repositories. What we learned about offensive AI, why faster patching is the wrong reaction, and what the architecture around vulnerabilities has to look like next.

• @dan_jeffries1 Daniel Jeffries on x

  Finally a semi-useful read on Mythos that is free of myth and talks about what this means more practically (not this is the end of the world as we know it, but how do we deal with faster patches and attacks from AI as other models scale to chained exploits)? This is the kind of

• @samuelcolvin Samuel Colvin on x

  Reading this, the bun rewrite to rust makes much more sense. My guess: Mythos looked at bun and had a shit fit - generated a deluge of vulnerabilities and memory bugs so vast and profound that they would be effectively impossible to fix in zig. Anthropic looked at the report

• @zackkorman Zack Korman on x

  Cloudflare is right about this. You're not going to be able to patch fast enough, but you can build your systems so that the vast majority of vulnerabilities don't matter. If you've not done that, you're going to have a bad time. [image]

• @rekdt @rekdt on x

  It's really funny watching companies learn things like patching at high velocity isn't a cybersecurity silver bullet The state of cybersecurity is so bad in tech today, they're recreating defense in depth from first principles

• @dok2001 Dane Knecht on x

  Mythos and other frontier models, pointed at live code across critical Cloudflare infrastructure. An honest read on what's working and what comes next. https://blog.cloudflare.com/ ...

• Anuk Fernando Anuk Fernando on linkedin

  AI has officially entered its “Senior Security Researcher” era.  Cloudflare's security team recently spent weeks testing Anthropic's new Mythos Preview against 50+ of their own code repositories. …

• Grant Bourzikas Grant Bourzikas on linkedin

  Mythos is the first real step into agentic AI for security, and the direction is hard to miss. As part of Project Glasswing …

• @justinhendrix Justin Hendrix on bluesky

  “Anthropic has agreed to brief leading finance ministries and central banks on vulnerabilities in the global financial system's cyber defences identified by the US technology company's latest AI model.”

• @mizmulligan Jennifer Mulligan on bluesky

  That's nice of them.  [embedded post]