""We've never had a problem finding vulnerabilities. We find them every day. We actually have a pile of them that we just don't fix," he said. "So I don't think that really changes anything.""
"Lindner pointed out that weak spots are easier to find than to fix, noting that Anthropic's blog post announcing Mythos stated over 99% of the vulnerabilities the model uncovered haven't been patched."
"More specifically, he said Mythos does little to help solve one of the biggest issues facing cybersecurity experts: social engineering. Hackers can still use existing tools and AI to impersonate an employee's boss or an IT worker and gain access to systems, he argued."
"Anthropic has said Mythos is so powerful it won't be publicly released, and it is being made available only to a group of 40 organizations including tech companies such as Microsoft, Apple, and Google, as well as others like cybersecurity company Crowdstrike and bank JPMorgan Chase so they can use the technology to improve their own security infrastructure through an effort it called Project Glasswing."
Anthropic's Claude Mythos Preview AI model has revealed significant cybersecurity vulnerabilities, including a 27-year-old flaw in OpenBSD. The model has identified thousands of high-severity vulnerabilities in various software. Despite the excitement in the tech community, some experts, like David Lindner, express skepticism about its effectiveness. Lindner emphasizes that finding vulnerabilities is not the main challenge; rather, fixing them is. He also notes that social engineering remains a critical issue that Mythos does not address. Anthropic has restricted access to Mythos, allowing only select organizations to utilize its capabilities.
Read at Fortune
Unable to calculate read time
Collection
[
|
...
]