原帖引用 · AI 翻译
Rohan Paul@rohanpaul_ai
IBM 计划将 Anthropic 的 Claude Mythos 集成到 IBM Concert Protect 中，让企业能够在自己的代码中查找未知漏洞。
此前，IBM 仅通过 Anthropic 设有准入限制的防御项目 Project Glasswing，将 Mythos 用于内部安全研究。
按计划，这款扫描器将读取客户选定的代码仓库，查找逻辑缺陷和可能尚无特征码或 CVE 记录的零日漏洞；这正是依赖特征码的工具的盲区。
扫描结果随后会交由 Proof of Exploitability 处理，后者检查代码、配置和基础设施，以确定攻击者是否真的能够触及每个漏洞。
在 IBM 的一个案例中，这一步将扫描器发现的 5,700 多项问题缩减为 12 个经证实可被利用的漏洞。
原文
IBM plans to put Anthropic’s Claude Mythos inside IBM Concert Protect so enterprises can hunt unknown bugs in their code. Until now, IBM used Mythos only for internal security research through Project Glasswing, Anthropic’s gated defensive program. The planned scanner would read customer-selected repositories for logic flaws and potential zero-days lacking any signature or CVE record, the blind spot of signature-based tools. Its findings then go to Proof of Exploitability, which checks code, configuration and infrastructure to show whether an attacker could actually reach each flaw. In one IBM case, that step cut more than 5,700 scanner findings to 12 proven exploitable vulnerabilities.
· UTC+8