Das neueste KI-Modell von Anthropic identifiziert „Tausende von Zero-Day-Schwachstellen“ in „jedem wichtigen Betriebssystem und jedem großen Webbrowser“ – Claude Mythos Preview löst einen Wettlauf um die Behebung kritischer Fehler aus, von denen einige seit Jahrzehnten ungepatcht sind
https://www.tomshardware.com/tech-industry/artificial-intelligence/anthropics-latest-ai-model-identifies-thousands-of-zero-day-vulnerabilities-in-every-major-operating-system-and-every-major-web-browser-claude-mythos-preview-sparks-race-to-fix-critical-bugs-some-unpatched-for-decades
20 Kommentare
If they’re truly critical bugs, they wouldn’t have gone unpatched for decades.
Don’t get me wrong, it’s good to fix vulnerabilities even if they haven’t been taken advantage of yet. But this is a fluff PR piece like 3/4ths of the AI articles posted online.
EDIT: I didn’t think this would be so controversial, but there’s a difference in a *critical bug* and a *critical vulnerability.* A critical bug would be a system-breaking defect in the code. A critical vulnerability is a vulnerability that, if exploited, would allow an unauthorized attacker to exploit the system.
It’s Frankenstein.
Anthropic every month: „Holy shit guys Claude might be TOO good.. oh no. It might even be alive!! I’m actually so scared guys it’s so good“
[deleted]
Everyone in this sub whining about this, and I’m just here with 30+ years technology experience under my belt thinking “this is awesome!”. 🤷
oh man, can’t wait for more outages, and maybe a windows patch thrusday too, maybe even a patch sunday if we are lucky.
This Is How They Tell Me the World Ends by Nicole Perlroth is a good read on this subject.
Yeah yeah yeah millions of bugs. Trillions. I call this bullshit. As curl about this. Most of these bugs will be none, just Ai slop not viewing things in context. Yes maybe one or two major bugs but most will be bullshit.
Additional, if one has ever seen the warning backlog of a huge software, I’m sure you’ll understand that there are bugs that are just not fixed because the time to do so is missing. 3000 warnings, that’s release material.
IF this is true.. and that’s a really really big *IF*, as sysadmins we are going to have serious patching to do.. and we’re going to have to massively up our patching cadence and not let a single system slip through the cracks..
As someone that works in cybersecurity there are thousands of vulnerabilities in literally all applications, with a very small amount being of any actual importance
Oops we developed another technology that will almost inevitably end the world as we know it.
99% of them being non-remote exploits I’m sure.
We should definitely believe this, I mean , it’s not like AI ever hallucinates. And I’m sure their AI has never seen the source code of Windows. AI generating news about AI 🤮
CIA is gonna be pretty annoyed losing all those banked vulnerabilities they had.
I guarantee that at least 95% of these are garbage bug reports. AI **can** find things people miss. But it also hallucinates or overstates vulnerabilities **all the time**.
Would love to see a breakdown of 1) How many of these are actually vulnerabilities and not hallucinations and 2) How many of these are minor issues that weren’t patches because they don’t actually do anything or are so specific as to be useless.
And have people verified those bugs, or is it lying?
Oh look, the AI hallucinations are delusions of grandeur this time.
I genuinely think these AI bros need to work in porn. They godly at glazing.
Yeah, I’m betting most of these are non issues. Like some vulnerability scanners warn me because I’m not escaping my SQL queries correctly and I’m vulnerable to injection. Bitch, none of the queries contain user input, it’s all from source code and controlled sources.