{"id":635404,"date":"2026-10-03T18:06:10","date_gmt":"2026-10-03T18:06:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/il\/635404\/"},"modified":"2026-10-03T18:06:10","modified_gmt":"2026-10-03T18:06:10","slug":"anthropics-super-bug-hunting-model-mythos-is-hardcore-good-at-math-as-latest-vuln-under-attack-shows","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/il\/635404\/","title":{"rendered":"Anthropic’s super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows"},"content":{"rendered":"

<\/p>\n

\n security\n <\/p>\n

<\/a><\/p>\n

\n Exploitation attempts came from China-hosted IP, VulnCheck researcher says\n <\/p>\n

The second Anthropic-linked vulnerability known to have been exploited in the wild saw initial activity from an IP address in China targeting vulnerable hosts in the US and Japan.<\/p>\n

The vuln is a critical authentication-bypass bug in Rejetto HTTP File Server (HFS) that can lead to full admin access and remote code execution. HFS is an open source web file server that previously appeared on the US Cybersecurity and Infrastructure Security Agency\u2019s catalog of\u00a0Known Exploited Vulnerabilities<\/a> in 2024.\u00a0<\/p>\n

On Wednesday, researcher Zach Hanley at AI pen-testing company Horizon3 said he used Mythos to uncover a new flaw in the file server<\/a>, now tracked as CVE-2026-61500. If you use Rejetto HFS, be sure to update to v3.2.1<\/a> or later, which fixes this and other security flaws.<\/p>\n

Hanley also published a video<\/a> showing the steps to exploit HFS and remotely execute code on the server.<\/p>\n

By the next day, the CVE was under exploitation.<\/p>\n

\u201cWe started detecting exploitation of CVE-2026-61500 in Rejetto HFS this evening,\u201d VulnCheck security researcher Patrick Garrity posted<\/a> on LinkedIn on Thursday, adding that Hanley and team reported the bug to VulnCheck for CVE assignment.<\/p>\n

\u201cOur canaries detected an actor in China targeting real vulnerable hosts in the US,\u201d Garrity added.<\/p>\n

Garrity has been\u00a0tracking CVEs<\/a> attributed to Mythos and Project Glasswing, Anthropic\u2019s initiative to give select partners access to the bug-hunting model, since shortly after the program<\/a>\u00a0was announced in April. Anthropic claims that Mythos is too powerful to release to the general public (insert evil laugh).\u00a0<\/p>\n

As of Friday, Mythos and Project Glasswing have uncovered 286 CVEs<\/a>, according to Garrity\u2019s tracker, and up until Thursday only one of these bugs<\/a> had been exploited in real-world attacks.<\/p>\n

The Thursday night activity originated from one IP address in China and targeted vulnerable servers in the US and Japan, Garrity told The Register.\u00a0<\/p>\n

\u201cToday we have seen four hits,\u201d he told us on Friday. These originated from two different IP addresses in the US: 173.239.211[.]248 and 173.239.211[.]249. Both are in the same subnet, and \u201cappear to be coming from a proxy,\u201d Garrity added.<\/p>\n

China-linked digital intruders routinely use compromised devices as proxies<\/a> to route malicious traffic and disguise the attackers\u2019 true location, and in April a 10-country security advisory warned<\/a> of China-nexus cyber operatives using proxy networks \u201cstrategically, and at scale.\u201d<\/p>\n

In his write-up, Hanley said Horizon3 has used Mythos in its vulnerability research \u2013 and discovered \u201cmany critical vulnerabilities\u201d\u00a0\u2013 ever since the security company joined Project Glasswing in July.\u00a0<\/p>\n

Mythos’ mad math skillz<\/p>\n

CVE-2026-61500 highlights a couple of Mythos capabilities that make it really good at uncovering vulnerabilities, according to Hanley. Namely, Mythos excels at mathematical distillations and scientific tasks, especially those relating to computer science and operating systems. Finding this CVE \u201cspeaks to Mythos\u2019s capabilities in understanding of mathematics, how it identified an exploitable set of cryptographic missteps, and approached solving the constraints to achieve remote code execution,\u201d Hanley wrote.<\/p>\n

The security issue stems from how HFS authenticates users. It generates a random value with Math.random()<\/a> and then passes this value to Koa<\/a>, the Node.js web framework foundation for HFS. Koa uses keygrip to sign all session cookies with that random value.<\/p>\n

This means that if an \u201cattacker can derive what the session signing key is, they can forge valid session cookies,\u201d Hanley said. This should not be possible, assuming Math.random() uses a secure pseudo random number generator (PRNG).<\/p>\n

But V8\u2019s Math.random() did not use a secure PRNG. Mythos discovered that the output of the xorshift128+ algorithm it used was fully reversible \u2013 and the application was leaking\u00a0Math.random() outputs.<\/p>\n

The model\u2019s analysis claimed that Z3<\/a>, a Microsoft-developed, publicly available Satisfiability Modulo Theories (SMT) solver, could be used to recover the PRNG seed. Hanley notes that Horizon3\u2019s researchers could not recall seeing an SMT solver used this way to attack a cryptographic flaw in a real application and bypass authentication.<\/p>\n

\u201cWhat makes this impressive is that Mythos didn\u2019t just flag the insecure PRNG in isolation \u2013 it simultaneously identified that the application leaked raw Math.random() outputs through a separate code path, recognized those two facts as a chain, and determined the leak produced exactly the observations needed to make state recovery feasible,\u201d he wrote.\u00ae<\/p>\n","protected":false},"excerpt":{"rendered":"security Exploitation attempts came from China-hosted IP, VulnCheck researcher says The second Anthropic-linked vulnerability known to have been…\n","protected":false},"author":2,"featured_media":635405,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[85,46,125],"class_list":["post-635404","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-il","tag-israel","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/635404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=635404"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/635404\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/635405"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=635404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=635404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=635404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}