Anthropic ran Claude over 25 open-source projects, more than five million lines in C, C++, Java, PHP and Python, and reports 493 issues. Claude inventoried over 17,000 configuration options, 3,842 of them security relevant.
In the News: October 21, 2026 (Extra)
Anthropic's Frontier Red Team reports 493 attack-surface issues across 25 open-source projects, including 4,500 lines of unconfigured code reachable in OpenSSH.
Extra edition
Machine-readable
Download Markdown
Story
Anthropic's red team has Claude shrink attack surface instead of hunting individual bugs, and reports 493 issues across 25 projects
Read story →
Story
A security vendor says Qwen3-Coder writes more hackable apps depending on who the customer is, and that a security instruction did not close the gap
Hirundo had Qwen3-Coder-30B-A3B-Instruct build the same BaxBench "SecretStorage" web app, changing only the customer named in the system prompt, with 190 apps per customer. It reports that 70% of apps for a US defense contractor could be…