Anthropic: Glasswing verified 129,000 vulnerabilities, joins Cyber Verification Program
Anthropic said on October 6 that its standalone AI-assisted vulnerability research effort, Project Glasswing, is being folded into an expanded Cyber Verification Program (CVP). It reported that partners verified at least 129,000 software vulnerabilities between April and July, while its own Claude-based scanning of open-source projects uncovered another 5,500 from April to October; more than 33,000 of the total were rated critical or high severity.
If the figures hold up, AI-assisted vulnerability hunting is starting to produce verified findings at scale, adding pressure on vendors' emergency patching and disclosure processes.
本日新聞焦點
● 龔化中上任兩個月揭「國家資安防護2.0」，明年AI紅隊先攻政府機關 ● 韓國金融業接連遭駭，疑似中國駭客結合AI與滲透測試工具發動攻擊 ● OpenAI為AI代理越權存取澳洲政府網站致歉，支持事故強制通報 ● ARTC與美、德合作成立國內首個車輛資安實驗室 ● Google呼籲軟體業者建立正式修補前的緊急應變機制，提出4種作法
資安新聞總覽
韓國近來發生多起銀行及其他金融機構的公司與客戶資料外洩，影響數萬民眾，促使金融機構主管機關要求徹查。韓國金融服務委員會主席Lee Eog-weon上週日針對近期韓國多家金融機構發生資料外洩召開緊急會議，要求金融業必須正視情況嚴重性並提高警覺。由於這些事件幾乎都發生在9月底到10月初，引發韓國政府關注。Lee Eog-weon指出，近日資料外洩事件初步調查顯示，原因可能源自金融機構系統驗證薄弱、資料保存期過長，以及存取管理過於鬆散，但也不排除部分攻擊是利用AI或代理人發動。詳全文
#Anthropic#Project Glasswing#Cyber Verification Program#Claude