Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Summary: Anthropic launched OSS Scanner, an opt-in vulnerability scanner that uses its strongest models, including Claude Mythos, to run periodic security scans of open-source projects at no cost, with outputs that are fully model-generated and require no human review or triage. Anthropic said it has identified more than 29,000 candidate vulnerabilities in major software projects, reported a little more than 6,000 to maintainers, and produced 584 advisories as of October 2, 2026, with 116 pull requests submitted to enroll projects as of writing.
Bottom line: Anthropic is deliberately not imposing a 90-day disclosure period on these findings because they may contain false positives, so maintainers and downstream consumers may receive thousands of machine-generated reports with no human validation behind them. The 29,000-to-6,000-to-584 funnel shows how much of that volume will not become a confirmed advisory.
Read the original at The Hacker News ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026