customize

kept by eddie jun 05

Anthropic released an open-source reference harness and Claude Code skills for automating vulnerability discovery, triage, and patching using Claude, alongside a managed product called Claude Security.

Claude Security is now in public beta
Claude Security public beta lets Enterprise customers scan code for vulnerabilities and generate targeted patches using Opus 4.7, with integrations across partner platforms.
also on Claude Security
How we contain Claude across products
Anthropic details how it contains AI agent blast radius across three products using sandboxes, VMs, and human-in-the-loop controls, while documenting missed risks like pre-trust code execution and user-mediated prompt injection.
also on gVisor, Claude, Claude Code, Anthropic, #developer-tools
GitHub - kubernetes-sigs/agent-sandbox: agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes.
Kubernetes SIG Apps introduces agent-sandbox, a CRD and controller for managing isolated, stateful, singleton workloads like AI agent runtimes.
also on gVisor, #open-source, #developer-tools
Everything You Need to Know About Claude Mythos - Vellum Blog
Anthropic's Claude Mythos model achieves 100% on Cybench, discovers real Firefox zero-days, exhibits alignment-relevant behaviors, and includes a 40-page welfare assessment.
also on #cybersecurity, Claude, Anthropic
Anthropic’s paper smells like bullshit
HN commenters criticize Anthropic's security report as vague, unsubstantiated FUD that lacks technical evidence and seems designed to lobby for regulation or investment.
also on #cybersecurity, Claude, Anthropic