Imodeli ye-Mythos AI ithole ubuthakathaka obungu-23 kusofthiwe yomthombo ovulekile.

I-Anthropic imemezele imiphumela yokuqala yokuhlola inguqulo yayo yokuqala yemodeli ye-Mythos AI, eyandisa kakhulu amakhono ayo okuthola amaphutha, ukuhlonza ubuthakathaka, nokubhala izinto ezisetshenzisiwe ezilungisiwe. Isebenzisa imodeli ye-Mythos AI, i-Anthropic iskene amaphrojekthi angaphezu kwenkulungwane abalulekile omthombo ovulekile, ihlonza ubuthakathaka obungu-23019. Ubuthakathaka obungu-6202 balobu buthaka bubekwe njengobuphezulu noma obubucayi.

Kulezi zimo zobuthakathaka ezingu-6202 ezichazwe njengeziyingozi yimodeli ye-Mythos AI, ezingu-1752 zaqinisekiswa abacwaningi bezokuphepha abazimele. Ezimweni ezingu-1587 (90.6%), ubuthakathaka buqinisekisiwe, kanti ezimweni ezingu-1094 (62.4%), izinga lobunzima lihlale liphezulu noma libucayi. Njengoba kunikezwe izinga lamanje le-false positive, kulindeleke ukuthi kwezimo zobuthakathaka ezingu-6202 eziyingozi ezibonwe yimodeli ye-AI, cishe ezingu-3900 (62.4%) zizogcina isilinganiso sobunzima obuphezulu bemodeli, kungabandakanyi ubuthakathaka obuyingozi obubonwe ngokwehlukana ngabahlanganyeli bephrojekthi ye-Glasswing abangu-50.

Ulwazi mayelana nobuthakathaka obuqinisekisiwe obungu-467 lwabelwana nabanakekeli bephrojekthi yomthombo ovulekile ngabameleli bezinkampani ezibuyekezayo. Ngezicelo ezihlukene, abasebenzi be-Anthropic babelane ngqo ngolwazi ngezinkinga ezingaqinisekisiwe eziyi-1129 nabanakekeli. Sekukonke, abanakekeli bephrojekthi yomthombo ovulekile engu-281 bathole ulwazi ngezinkinga eziyi-1596 futhi baqinisekisa ukuba khona kobuthakathaka obungu-1451. Kodwa-ke, izinkinga ezingu-97 kuphela ezilungisiwe kuma-codebases kuze kube manje, futhi imibiko yomphakathi yobuthakathaka engu-88 ikhishwe.

Ngaphezu kwalokho, abahlanganyeli bephrojekthi yeGlasswing abangu-50 abanikezwe ukufinyelela kusenesikhathi kwimodeli yeMythos kubikwa ukuthi bathole ubuthakathaka obuyingozi obungaphezu kuka-10,000 kuma-codebase abo. Isibonelo, iCloudflare ithole amaphutha angaphezu kuka-2000 isebenzisa iMythos, angu-400 awo alinganiswe njengaphezulu futhi abucayi. Izinga le-Cloudflare lokutholakala kwemiphumela engalungile laliphansi kunelokuhlolwa kwabantu. IMozilla, lapho ihlola iFirefox 150, ithole ubuthakathaka obungu-271 isebenzisa iMythos, okuphindwe kayishumi kunenani elitholakale lapho kuhlolwa iFirefox 148 kusetshenziswa imodeli yeClaude Opus 4.6.

Isibonelo senkinga ebalulekile esivele ilungisiwe sinikeziwe:
ubungozi (CVE-2026-5194) kulabhulali ye-wolfSSL cryptographic. I-Mythos ikwazile ukulungiselela i-exploit evumela umhlaseli ukuthi akhiqize isitifiketi se-ECDSA mbumbulu samawebhusayithi nama-akhawunti e-imeyili. amaseva, okwacutshungulwa njengokusebenzayo lapho kuqinisekiswa umtapo wolwazi we-wolfSSL. Inkinga ibangelwe usayizi we-hash ongekho kanye nokuhlolwa kwe-OID kukhodi, okwavumela usayizi we-hash omncane kunokuvumelekile ukuthi ucaciswe esitifiketini.

Source: opennet.ru

Thenga ukusingathwa okuthembekile kwamasayithi anokuvikelwa kwe-DDoS, amaseva e-VPS VDS 🔥 Thenga ukusingathwa kwewebhusayithi okuthembekile ngokuvikelwa kwe-DDoS, amaseva e-VPS VDS | ProHoster