Anthropic 为关键开源项目推出可选安全扫描服务
原标题：Anthropic Adds Opt-In Security Scanning for Critical Open-Source Projects
AI 摘要
Anthropic 推出免费、需主动选择加入的 OSS Scanner 服务，利用包括 Claude Mythos 在内的最强模型为开源项目自动生成漏洞报告，报告未经人工审核即发送给维护者。过去六个月模型发现逾 2.9 万个候选漏洞，但人工仅复核约 6000 个，显示人工验证已成瓶颈。PostgreSQL、wolfSSL 等维护者反馈部分报告和补丁可直接使用，curl 也据此修复了一个 HTTP/2 释放后使用漏洞；但 Anthropic 承认存在严重性评级虚高和对威胁模型理解偏差的问题。
正文节选
AI company Anthropic has launched OSS Scanner, a free, opt-in service to find vulnerabilities in open-source projects. Enrolled maintainers receive periodic security reports generated by the company's strongest models, including Claude Mythos. The reports are sent without human review, and project maintainers can choose to validate their findings and decide which proposed fixes to accept. In its 8th October announcement, Anthropic's Frontier Red Team explains that human validation has become a c