AN OPT-IN VULNERABILITY-FINDING SERVICE FOR OPEN-SOURCE SOFTWARE

Summary from the TLDR InfoSec newsletter

Anthropic launched OSS Scanner, a free, opt-in tool that periodically sends open-source maintainers model-generated vulnerability reports. The reports include reproducers, explanations, and candidate patches, but humans don't review them. During validation, 85 of 97 critical- or high-severity findings met Anthropic's disclosure bar, while one finding was invalid. Eligible maintainers can sign up through GitHub.