aiqbench takeAI Safety

Anthropic's Mythos AI autonomously discovered a critical vulnerability in Rejetto HTTP File Server caused by the use of non-cryptographic Math.random() for session signing, enabling attackers to forge admin sessions and execute arbitrary code. This finding highlights the persistent risks of relying on standard JavaScript pseudo-random number generators in security-sensitive contexts, even within open-source frameworks like Koa. The incident underscores Mythos's capability to identify high-severity flaws in third-party software through its Project Glasswing initiative.

Sources coveringCybersecurity News, TechCrunch, Fortune, InfoQ

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code

Cybersecurity NewsOctober 7, 20263 min read

Anthropic’s Mythos AI has identified a critical vulnerability in Rejetto HTTP File Server that could allow remote attackers to forge administrator sessions and execute arbitrary code. The issue, tracked as CVE-2026-61500, stems from predictable session-signing keys generated through JavaScript’s non-cryptographic Math.random() function. Horizon3 made the finding after joining Anthropic’s Project Glasswing in July 2026, which […] The post Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code appeared first on Cyber Security News.

Excerpt shown under the publisher's RSS terms · 53 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article