AI uncovers Windows vulnerabilities faster than Microsoft can patch, risking federal contracts
This digest was compiled by AI from multiple sources — links to the originals are below.
Anthropic’s Mythos AI model is uncovering Windows security flaws at a pace that Microsoft cannot match, a Computerworld analysis finds. The discovery has raised alarms about Microsoft’s ability to protect sensitive systems and could endanger billions of dollars in U.S. government contracts. Some members of Congress have already threatened to curtail federal contracts with Microsoft unless it improves its security posture.
Mythos Discovery Speed
Anthropic’s Mythos AI model took just 31 minutes to generate a proof-of-concept exploit for a Windows kernel vulnerability in early testing, Axios reported. The model has since identified thousands of high-severity vulnerabilities across major operating systems and web browsers. Anthropic cautioned that such AI capabilities will soon proliferate, potentially falling into the hands of actors who do not deploy them safely. In response, Anthropic launched Project Glasswing, a defensive initiative involving Microsoft, Google, Amazon, Apple, Nvidia, and others.
Microsoft’s Patching Dilemma
Microsoft must now choose between devoting massive resources to rapidly fix every AI-discovered flaw or prioritizing the most critical vulnerabilities and addressing others later at lower cost. The company faces long-standing criticism for frequent security breaches, with some U.S. lawmakers proposing to reduce federal contracts until it demonstrates stronger safeguards. Billions of dollars in government deals could be at risk if the perception of insecurity persists. Meanwhile, unrestricted access to Mythos means hackers could also use its findings to launch attacks before patches are available.
What's Next
Microsoft is expected to announce its patching strategy soon as pressure intensifies from Congress and Project Glasswing partners. It remains to be seen whether the company can restore confidence in time to protect its federal revenue streams or if threat actors will exploit the vulnerabilities first.
1 source
AI uncovers Windows vulnerabilities faster than Microsoft can patch, risking federal contracts
