aifollow.news
返回 Rohan Paul
Rohan Paul· @rohanpaul_ai · X· · 原发布时间 AI 评分47

IBM 计划将 Claude Mythos 接入 Concert Protect,扫描企业代码漏洞

AI 导读

IBM 计划让企业用 Claude Mythos 扫描自行选定的代码库,寻找没有特征码或 CVE 记录的潜在零日漏洞。扫描结果还将交由 Proof of Exploitability 检查漏洞是否可被攻击者触及;IBM 的一个案例中,逾 5,700 条扫描发现最终缩减为 12 个经证实可利用的漏洞。

原帖引用 · 原文

@rohanpaul_ai

IBM plans to put Anthropic’s Claude Mythos inside IBM Concert Protect so enterprises can hunt unknown bugs in their code.

Until now, IBM used Mythos only for internal security research through Project Glasswing, Anthropic’s gated defensive program.

The planned scanner would read customer-selected repositories for logic flaws and potential zero-days lacking any signature or CVE record, the blind spot of signature-based tools.

Its findings then go to Proof of Exploitability, which checks code, configuration and infrastructure to show whether an attacker could actually reach each flaw.

In one IBM case, that step cut more than 5,700 scanner findings to 12 proven exploitable vulnerabilities.

来源:Rohan Paul · x.com

产品
发现内容有误?提交纠错