Firefox shaken: 22 critical vulnerabilities revealed by Anthropic

⚡

Key Takeaways

1Anthropic discovered 22 vulnerabilities in Firefox, 14 of which are considered very severe.

2The majority of the flaws have been fixed in version 148 of Firefox, released in February.

3The Claude Opus 4.6 tool cost $4,000 in API credits to create just two successful exploits.

💡Why it matters — These findings highlight the effectiveness of AI tools in enhancing the security of open-source projects, despite challenges in exploiting vulnerabilities.

⚡Le brief IA que lisent les pros

Le brief IA que les pros lisent chaque soir

Les 7 actus IA du jour, décryptées en 5 min. Gratuit.

Inclus dès l'inscription : notre sélection des meilleurs guides & comparatifs IA.

Choisis ton rythme

Gratuit · Pas de spam · Désabonnement en 1 clic

📄

Full Analysis

Anthropic recently uncovered 22 vulnerabilities in the Firefox browser over the course of two weeks, 14 of which were classified as high severity. These discoveries were made using Claude Opus 4.6. Most of these flaws have been patched in Firefox version 148, released in February, although some fixes will have to wait for the next update.

The Anthropic team focused its efforts on Firefox's JavaScript engine before expanding its analysis to other parts of the code. Firefox was chosen due to its complexity and its reputation as one of the most tested and secure open-source projects in the world.

Despite the effectiveness of Claude Opus in identifying vulnerabilities, the tool proved less capable of developing software that exploits these flaws. Anthropic spent $4,000 in API credits attempting to create proof-of-concept exploits, but only two were successful.

This nonetheless highlights the power of AI tools for open-source projects, even as they lead to an influx of poor pull requests alongside useful proposals.

⚡

Brief IA — L'actualité IA en français

L'essentiel de l'actualité de l'intelligence artificielle, décrypté et expliqué chaque jour.

📰 Voir toutes les actus IA →