Solved New Firefox update patches a whopping 271 bugs with help from Claude Mythos

• Firefox 150 enhances split view, tab sharing, and other features.
• The latest version also fixes 271 security flaws.
• Anthropic's Claude Mythos Preview AI model found some of the flaws

Click to expand...

I still consider it a lot of hype. Only 40 of those 271 received CVEs and only 14 were critical or high severity. I've seen reports that the average cost to find a single vulnerability i around $14,000 and that's not even guaranteed to be a bug. It's unsustainable.

neemobeer said:

I still consider it a lot of hype. Only 40 of those 271 received CVEs and only 14 were critical or high severity. I've seen reports that the average cost to find a single vulnerability i around $14,000 and that's not even guaranteed to be a bug. It's unsustainable.

Click to expand...

What does this $14K cost mean? People time or Mythos run time charge? Considering that Mozilla is run by volunteers, what does this cost really mean?

Great question, it's the cost per mythos autonomous campaign. Basically mythos iterates through thousands or more steps on average discovering a single vulnerability. This is basically the cost due to token consumption input/ output used to generate a successful exploit. Mythos via the glasswing project is limited to about 50 companies and I'm sure that's under heavy NDA. I've seen the question posed elsewhere but it's unclear who's really footing the bill for these discovered vulnerabilities. Also the Mozilla foundation does generate revenue albeit not a ton, so it does have funding.

neemobeer said:

Great question, it's the cost per mythos autonomous campaign. Basically mythos iterates through thousands or more steps on average discovering a single vulnerability. This is basically the cost due to token consumption input/ output used to generate a successful exploit. Mythos via the glasswing pr

Click to expand...

I can imagine that Anthropic starts to offer DAAS (Debugging As A Service) in the not too distant future.

It would be fascinating if the entire Windows 11 stack, including all signed drivers, are run through Mythos. That would be not just Patch Tuesday, but Patch week or even Patch month.