惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

H
Help Net Security
爱范儿
爱范儿
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
博客园 - 三生石上(FineUI控件)
大猫的无限游戏
大猫的无限游戏
Hugging Face - Blog
Hugging Face - Blog
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Vercel News
Vercel News
人人都是产品经理
人人都是产品经理
G
Google Developers Blog
WordPress大学
WordPress大学
S
SegmentFault 最新的问题
雷峰网
雷峰网
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Jina AI
Jina AI
博客园 - 叶小钗
D
DataBreaches.Net
D
Docker
月光博客
月光博客
博客园 - 司徒正美
Last Week in AI
Last Week in AI
有赞技术团队
有赞技术团队
腾讯CDC
酷 壳 – CoolShell
酷 壳 – CoolShell

www.infosecurity-magazine.com

Just Three Ransomware Gangs Accounted for 40% of Attacks Last Month Google Chrome Rolls Out Protection Against Infostealers Targeting Session Cookies STX RAT Targets Finance Sector With Advanced Stealth Tactics Bitcoin Depot Reports $3.6m Crypto Theft After System Breach Atomic Stealer MacOS ClickFix Attack Bypasses Apple Security Warnings Middle East Hack-for-Hire Operation Traced to South Asian Cyber Espionage Group Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs Google Warns of New Threat Group Targeting BPOs and Helpdesks Google API Keys Quietly Gain Access to Gemini on Android Devices Critical Vulnerability in Ninja Forms Exposes WordPress Sites Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets Russian APT28 Hackers Hijack Routers to Steal Credentials, UK Security Agency Warns GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs New 'Storm' Infostealer Remotely Decrypts Stolen Credentials NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts Apple Expands iOS 18 Security Updates Amid DarkSword Threat Researchers Observe Sub-One-Hour Ransomware Attacks GitHub Used as Covert Channel in Multi-Stage Malware Campaign Most CNI Firms Face Up to £5m in Downtime from OT Attacks Google Introduces Android Dev Verification Amid Openness Debate New Venom Stealer MaaS Platform Automates Continuous Data Theft Chinese Hackers Target European Governments in Espionage Campaigns
Anthropic Rolls Out Claude Security for AI Vulnerability ...
Beth Maundrill · 2026-05-01 · via www.infosecurity-magazine.com

Anthropic has launched Claude Security in public beta to its Claude Enterprise customers.

Previously known as Claude Code Security, the cybersecurity tool is built on Anthropic’s latest generally available AI model, Claude Opus 4.7, to scan codebases to find and patch software vulnerabilities.

It comes with scheduled and targeted scans, easier integration with audit systems, and improved tracking of triaged findings, according to the AI firm. No API integration or custom agent build is required.

“If your organization uses Claude, you can start scanning today,” a company statement said.

Meanwhile, access for Claude Team and Max customers is coming soon, according to the AI firm.

Claude Security can be accessed directly from the Claude.ai sidebar, or at claude.ai/security.

“While scanning, Claude reasons about code much like a security researcher. Rather than finding vulnerabilities by searching for known patterns, Claude seeks to understand how components interact across files and modules, traces data flows, and reads the source code,” Anthropic described.

Claude then provides a detailed explanation of each of its findings, including its confidence that the vulnerability is real, how severe it is, its likely impact and how it can be reproduced.

It also generates instructions for a targeted patch.

Claude Security has already been tested by hundreds of organizations of all sizes in limited research preview.

Based on the past two months of testing, Anthropic has added the following features to Claude Security:

  • A multi-stage validation pipeline that independently examines each finding before it reaches an analyst. This drives down false positives. Claude attaches a confidence rating to every result
  • An option to schedule scans, so teams can set a regular cadence around reviewing and acting on findings
  • The ability to target a scan at a particular directory within a repository, dismiss findings with documented reasons (so that future reviewers can trust prior triage decisions), export findings as CSV or Markdown for existing tracking and audit systems, and send scan results to Slack, Jira, or other tools via webhooks

Opus 4.7’s capabilities are also being integrated into a number of cybersecurity firm’s software tools that many enterprises are already using. These include CrowdStrike, Microsoft Security, Palo Alto Networks, SentinelOne, TrendAI and Wiz.

This comes just weeks after Anthropic launched Project Glasswing and its frontier AI model Claude Mythos Preview. At the moment, Mythos is only available to a select number of partners. In testing, Anthropic said the Mythos model discovered thousands of zero-day vulnerabilities which had not previously been identified.

Meanwhile, OpenAI has launched GPT‑5.4‑Cyber and expanded its Trusted Access for Cyber program to support more permissive, streamlined deployment of AI models for cybersecurity defense use cases.