VulnCheck's Project Glasswing report indicates that Anthropic has attributed 442 CVEs to its findings over seven months, representing a small fraction of the year's total. However, the report highlights a significant gap between Anthropic's reported findings and actual fixes, with a large number of findings remaining unaddressed or marked as duplicates. Questions have also been raised about Anthropic's true positive rate and its OSS Scanner's validation process, as demonstrated by curl's rejection of several published reports. AI
IMPACT Highlights potential issues in AI model security validation and remediation processes, impacting trust and development practices.
RANK_REASON The cluster discusses a report detailing security findings and remediation rates related to an AI company's practices, fitting the research category. [lever_c_demoted from research: ic=1 ai=1.0]
Read on Mastodon — mastodon.social →
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →