• [$] A flood of useful security reports

    From LWN.net@1337:1/100 to All on Thu Apr 9 14:30:07 2026
    [$] A flood of useful security reports

    Date:
    Thu, 09 Apr 2026 13:28:44 +0000

    Description:
    The idea of using large language models (LLMs) to discover security problems is
    not new. Google's Project Zero investigated the feasibility of using LLMs for security research in 2024. At the time, they
    found that models could identify real problems, but required a good deal of structure and hand-holding to do so on small benchmark problems. In February 2026, Anthropic published a report claiming that the company's most recent
    LLM at that point in time, Claude Opus 4.6, had discovered
    real-world vulnerabilities in critical open-source software, including the Linux
    kernel, with far less scaffolding. On April7, Anthropic announced a new experimental model that is supposedly even better ; which they have partnered with the Linux Foundation to supply to some open-source developers with
    access to the tool for security reviews.
    LLMs seem to have progressed significantly in the last few months, a change which is being noticed in the open-source community.

    ======================================================================
    Link to news story:
    https://lwn.net/Articles/1066581/


    --- Mystic BBS v1.12 A49 (Linux/64)
    * Origin: tqwNet UK HUB @ hub.uk.erb.pw (1337:1/100)