Mythos加速AI漏洞攻防竞赛
TechRadar 报道称，Anthropic 发布了 Mythos，其安全能力加剧了外界对 AI 工具给安全团队带来风险的讨论。据 Project Glasswing 称，Mythos 与约 50 家合作组织在约一个月内发现了逾 1 万个高危和严重漏洞，其中包括在 1,000 多个开源项目中估计发现的 6,202 个高危或严重漏洞。TechRadar 作者认为，AI 正在提高攻击的规模和速度、降低漏洞利用门槛，并缩短安全团队的响应窗口。
TechRadar 的分析称，AI 正在同时提升漏洞发现能力和漏洞利用速度，使持续暴露管理及更快修复成为安全团队更重要的任务。
Since the launch of Anthropic's Mythos, the debate around the risks that AI-powered tools pose for security teams has steadily ramped up.
Yet, fundamentally, the attack targets aren’t changing: the big shift is one of scale and speed. AI finds more vulnerabilities, giving security teams more to deal with. But at the same time, AI is lowering the technical barrier to exploitation. The result is a situation where the window of time that teams have to respond has drastically reduced.
This has clear implications for how organizations approach exposure management and reinforces the need for solutions that help security and IT teams stay secure amidst this new reality.
Vulnerability detection is accelerating
The initial update from Project Glasswing underlined the power behind the Mythos model that has fueled so much speculation and concern.
In approximately one month, Mythos and around 50 partner organizations reportedly identified more than 10,000 high and critical severity vulnerabilities, with 6,202 estimated high/critical vulnerabilities found across more than 1,000 open-source projects.