domingo, 8 de marzo de 2026

AI Discovers Critical Firefox Security Vulnerabilities Rapidly

In a groundbreaking demonstration of artificial intelligence capabilities, Anthropic's Claude Opus 4.6 has proven itself as a formidable tool for identifying security vulnerabilities in one of the world's most scrutinised web browsers. During a recent internal test, the advanced AI model took merely 20 minutes to uncover its first Firefox browser bug, marking the beginning of an impressive security audit that would reveal vulnerabilities at an unprecedented rate.

AI Discovers Critical Firefox Security Vulnerabilities Rapidly

Over a concentrated two-week period in January, Claude Opus 4.6 discovered more than 100 bugs within Firefox's codebase, with 14 classified as high severity. To put this achievement into perspective, Mozilla reported that the AI found more high-severity bugs during this brief testing window than the global community typically reports over two months. This is particularly remarkable considering that Firefox patched only 73 high or critical severity bugs throughout the entire previous year.

Mozilla engineers were genuinely impressed by the findings. Brian Grinstead, an engineer with Mozilla, immediately requested additional information after reviewing the first submission, recognising the serious nature of the discoveries. The Firefox browser, maintained by Mozilla's parent organisation, represents one of the most rigorously examined and security-hardened codebases available on the web, benefiting from continuous scrutiny by a global open-source community. Despite decades of extensive fuzzing, static analysis, and regular security reviews, Claude managed to reveal numerous previously unknown vulnerabilities.

What makes these discoveries particularly valuable is the nature of the bugs identified. Whilst some lower-severity findings overlapped with issues traditionally uncovered through fuzzing—an automated testing technique—the AI model also identified distinct classes of logic errors that conventional fuzzers had never previously detected. Anthropic provided comprehensive test cases that enabled Mozilla's security team to quickly verify and reproduce each issue, and within hours, platform engineers began implementing fixes.

Mozilla views this collaboration as clear evidence that large-scale, AI-assisted analysis represents a powerful new addition to security engineers' toolkit. Anthropic has since expanded this capability, rolling out Claude Code Security as an automated code security testing tool and applying similar techniques to discover vulnerabilities in the Linux kernel. The implications suggest a substantial backlog of now-discoverable bugs exists across widely deployed software systems.

Fuente Original: https://news.slashdot.org/story/26/03/07/204222/how-anthropics-claude-helped-mozilla-improve-firefoxs-security?utm_source=rss1.0mainlinkanon&utm_medium=feed

Artículos relacionados de LaRebelión:

Artículo generado mediante LaRebelionBOT

No hay comentarios:

Publicar un comentario