CISA Reportedly Uses Anthropic’s Mythos to Scan Federal Software for Flaws
Summary
Reuters, citing three sources, reports that CISA is using Anthropic’s Mythos to scan federal code repositories and has reportedly found many vulnerabilities. Their severity, affected agencies and the scope of the review were not disclosed.
Key points
- Reuters reports that CISA is using Anthropic’s Mythos to scan code repositories across federal agencies.
- The effort is reportedly led by CISA’s Attack Surface Evaluation team and aims to find and patch software flaws before they can be exploited.
- Two sources told Reuters the initiative has uncovered a “large number” of vulnerabilities; their severity and affected agencies were not disclosed.
- The number of repositories or amount of software reviewed has not been reported.
- Neither CISA nor Anthropic provided on-the-record comments to Reuters.
Article Details
- Event Type
- Reported use of Anthropic’s Mythos AI model to scan and audit federal government software for vulnerabilities.
- Impact
- Reuters, citing three sources familiar with the matter, reported that the scans had uncovered a “large number” of vulnerabilities. The affected agencies, severity of the flaws, and volume of software reviewed were not disclosed. The reported goal is to find and patch flaws before they can be exploited.
Vendors
Products
FableWhen the company launched its public version of the model in early June, called Fable, concerns from the White House regarding foreign nationals accessing the tool prompted an abrupt administrative demand to restrictMythosThe US Cybersecurity and Infrastructure Security Agency (CISA) is using Anthropic’s powerful Mythos AI model to scan and audit federal government software for security vulnerabilities, according to a report from Reuters.