InfoResearchHacker News · community
Using Claude to reduce the attack surface of code
Anthropic's red team describes using Claude to automatically analyze and reduce the attack surface of code: across 25 open-source projects (over five million lines of code), it found 493 issues, including 162 undocumented security-sensitive configuration combinations and pre-authentication code reachable by default. In OpenSSH, it traced roughly 4,500 lines of ML-DSA-44 signature parsing code reachable pre-authentication, leading to fixes shipped in versions 10.5 and 10.6. The techniques are packaged into a reusable Claude skill being integrated into OSS-Scanner, and the team encourages devel…
Read the full story on anthropic.com
What to doConsider running attack surface analysis (e.g. the published Claude skill or the described three-pass methodology) over your own codebases to find unnecessarily reachable code and risky configuration…
- Source
- anthropic.com