Cloudflare 安全团队用 50 多个自有仓库实测 Anthropic 的 Mythos Preview，称其为一次阶梯式进步。主要发现不是它抓到多少漏洞，而是模型能把多个低危漏洞串联成一个可用攻击链，并自行编写 PoC、编译、运行、失败后调整重试。团队还指出，加快打补丁并非正确应对，漏洞周边的架构比补丁速度更重要。
Cloudflare pointed Anthropic's Mythos Preview at 50+ of their own repos.
They call it a step-function forward "Mythos Preview is a real step forward, and it's worth saying that plainly before getting into anything else."
The big finding isn't the bugs it caught - It's that the model can take several low-severity vulnerabilities - the kind that sit invisible in backlogs - and chain them into a single working exploit. Write the proof-of-concept. Compile it. Run it. Adjust when it fails. Try again.
That loop is what separates a scanner from a researcher.
The other finding security teams should pay attention to: "patching faster" is the wrong response. If your regression testing takes a day, a two-hour SLA just means you ship broken fixes. The architecture around the vulnerability matters more than the speed of the patch.
Mythos is not just hype. It shows its power in real-world use cases.
Cloudflare's security team spent the last few weeks testing Anthropic's Mythos against fifty of our own repositories. What we learned about offensive AI, why faster patching is the wrong reaction, and what the architecture around vulnerabilities has to look like next. cfl.re/49BRUqW在 X 查看被引用的帖子
来源：@kimmonismus · x.com