Anthropic AI Finds 493 Flaws in 25 Open-Source Projects Using New Tool
On October 21, 2026, Anthropic revealed that its Claude models scanned 25 open-source software projects across more than five million lines of code, identifying 493 attack-surface issues.
Claude discovered 94 configuration combinations that silently disabled security controls without generating any error message or warning, including a 21-year-old flaw in server certificate requirements.
In OpenSSH - software that secures remote server access - Claude found roughly 4,500 lines of experimental post-quantum signature code reachable by unauthenticated clients before configuration checks ran.
Anthropic updated Claude Security to provide continuous repository monitoring on every commit for enterprise customers, automatically tracking and resolving vulnerabilities until code fixes are detected.