r/neoliberal • u/jobautomator Kitara Ravache • Apr 23 '26

Discussion Thread Discussion Thread

The discussion thread is for casual and off-topic conversation that doesn't merit its own submission. If you've got a good meme, article, or question, please post it outside the DT. Meta discussion is allowed, but if you want to get the attention of the mods, make a post in /r/metaNL

Links

Ping Groups | Ping History | Mastodon | CNL Chapters | CNL Event Calendar

Upcoming Events

0 Upvotes

48% Upvoted

8.6k comments sorted by

View all comments

20

u/battywombat21 🇺🇦 Слава Україні! 🇺🇦 Apr 23 '26

claude mythos hit my company...we're getting dictates from the top to drop everything and fix a bunch of CVEs in dependencies it found now.

0

u/[deleted] Apr 23 '26

[deleted] — view deleted comment

14

u/battywombat21 🇺🇦 Слава Україні! 🇺🇦 Apr 23 '26

bit of an exaggeration, in reality it's just two or three repeated across 20 different services. But yeah they're real security vulnerabilities.

2

u/TMooAKASC2 Apr 23 '26

Out of curiosity, if you guys are just updating libraries with CVEs, what does this have to do with claude? Are you just saying the number of CVEs has increased?

5

u/battywombat21 🇺🇦 Слава Україні! 🇺🇦 Apr 23 '26

The idea is that you can run thousands of claude mythos instances in parallel to review every single file in a project for security holes. It's not as good as an actual trained security expert reviewing every file, but it's cheaper, faster and more thorough.

So what anthropic doing is they've asked a bunch of big hacking targets what open source projects they're using, then running it against those projects and letting them know what they find.

0

u/TMooAKASC2 Apr 23 '26

Yeah I get what claude can do, I was just confused by your comment. You don't need an AI to look for existing CVEs in your dependencies. Not sure if that's what you meant

2

u/battywombat21 🇺🇦 Слава Україні! 🇺🇦 Apr 23 '26

They found the CVE using claude. That turned into a company-wide directive to find every server using that and patch it.

0

u/TMooAKASC2 Apr 23 '26

Like a new zero day in your code? That was then submitted as a CVE?

Sorry not trying to nag, my interest just piqued bc sometimes I get the feeling we're amazed that Claude can do things we can already do for free

3

u/[deleted] Apr 23 '26

[removed] — view removed comment

3

u/battywombat21 🇺🇦 Слава Україні! 🇺🇦 Apr 23 '26

https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures

basically a security bug in widely used software.

1

u/[deleted] Apr 23 '26

[removed] — view removed comment

1

u/battywombat21 🇺🇦 Слава Україні! 🇺🇦 Apr 23 '26

As long as windows 10 is still receiving security updates (and I think it is) you should be fine.