Anthropic announced OSS Scanner, a free opt-in service that sends AI-generated vulnerability reports directly to open source maintainers without human review, along with suggested fixes and PoCs. It also launched the Critical Infrastructure Defense Program to help OT providers and their partners identify and remediate long-standing security flaws in essential systems used by power, water, manufacturing, and transportation sectors. #Anthropic #OSSScanner #ProjectGlasswing #CIDP #Claude
Keypoints
- Anthropic introduced OSS Scanner for open source vulnerability detection.
- Reports are sent to maintainers without human review to speed delivery.
- Each report includes a vulnerability explanation, PoC, and possible fix.
- The Critical Infrastructure Defense Program focuses on OT security providers.
- Founding partners include major firms like Dragos, Nozomi Networks, and Rockwell Automation.