Claude flags nearly 500 worrying open source security issues — C, Java, and Python code all at risk as one flaw…
- Anthropic used Claude to analyze 25 open source projects and uncovered nearly 500 security issues
- Research found exposed pre-authentication code paths, conflicting security settings, and long-hidden flaws
- AI identified attack-surface reductions that removed unnecessary code exposure before vulnerabilities could be exploited
Anthropic recently used Claude to analyze 25 major open source projects written in C, C++, Java, PHP, and Python, in search of security issues. It found almost 500 of them, including security controls turned off by conflicts in settings, sensitive code accessible before authentication, and even a vulnerability that sat in the code for 21 years.
This wasn’t a standard hunt for vulnerabilities. In its report, Anthropic argues that looking for individual vulnerabilities is a Sisyphean task that scales poorly and never guarantees security. Instead, it thinks defenders should turn towards reducing software attack surfaces by restricting unnecessary access to potentially exploitable code.
“A defender who reduces unnecessary...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
