Mozilla’s AI-assisted hardening work started in February 2026, and Firefox v150 shipped 271 Mythos fixes on April 21. That’s roughly two months of work of over 100 developers.
In October 10th, Anthropic’s OSS Scanner was anounced, allowing opensource projects to run their vulnerability scanner and get privately submitted reports. It’s up to the maintainer to review, fix, test and publish them, i’m considering that approach kind of a good agreement, and a helpful way bring this powerful tool for free to opensource software.
Right after seeing the anouncement I fired codex and did the laziest thing I could do: prompt to fill the Anthropic form for me and create a PR into their oss-scanner repo to make radare2 into their aproval review process. Two weeks later, at 1am I got a mail with 372 perfectly-written and well structured reports arrived by mail, with reproducers, ASan crash logs, reproduction steps, CWE details and Markdown explanations.
