tech
Anthropic is finding bugs faster than Microsoft can fix them
Microsoft is on a mad dash behind the scenes to patch exploits before hackers find them.
TL;DR
- Anthropic's AI model, Mythos, is discovering critical software vulnerabilities in Microsoft products faster than the company can patch them.
- Microsoft engineers are in a 'mad dash' to fix flaws before adversaries can exploit them, with a perceived deadline of May 31st.
- In April alone, Mythos found 90 critical and 141 important bugs in Microsoft SharePoint.
- The current industry triage system prioritizes critical and important bugs, potentially leaving lower-severity flaws unpatched and vulnerable to chaining by adversaries.
- Microsoft's public 'Patch Tuesday' releases have shown a significant increase in the number of vulnerabilities patched, indicating the scale of the problem.
- Experts suggest that the tech industry, including Microsoft, needs to re-evaluate its vulnerability management strategies due to the capabilities of AI-powered bug discovery.
- The issue of technical debt and understaffed security response centers exacerbate the challenge of managing the growing volume of vulnerabilities.