Article
Claude Mythos and Curl Show the Real Problem With AI Bug Hunting
Anthropic’s restricted Claude Mythos model reportedly found only one real low-severity vulnerability in curl, despite claims that the model had discovered thousands of zero-days elsewhere. The result does not prove AI security research is overhyped, but it does show the gap between marketing, real-world validation, and mature open-source codebases.
Anthropic’s restricted Claude Mythos model was supposed to represent a new frontier in AI-assisted vulnerability discovery. Then it was tested against curl, one of the most important and heavily used open-source tools on the internet. The result was...
