{"schema":"postcutoff/event@1","as_of":"2026-10-22T13:31:00+02:00","url":"https://postcutoff.com/e/2026-10-20-anthropic-claude-attack-surface-reduction/","md":"https://postcutoff.com/e/2026-10-20-anthropic-claude-attack-surface-reduction/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"human editor","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-10-20-anthropic-claude-attack-surface-reduction","date":"2026-10-20","date_precision":"day","short_title":"Anthropic: Claude flags 493 attack-surface issues in 25 open-source projects","deck":"Including a 21-year-old silent auth bypass and 16% of OpenSSH's pre-auth code","takeaway":"Anthropic's Frontier Red Team published on Oct 20, 2026 a method in which Claude maps which code in a project is reachable by default and removes what a deployment doesn't need.","category":"research","category_label":"Research","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":[{"n":1,"title":"Anthropic: Using Claude to reduce the attack surface of code","url":"https://www.anthropic.com/research/attack-surface-reduction","type":"official","group":"primary","domain":"anthropic.com"},{"n":2,"title":"Hacker News discussion (132 points)","url":"https://news.ycombinator.com/item?id=50175779","type":"discussion","group":"reactions","domain":"news.ycombinator.com"}],"official":1,"filed":"2026-10-22","updated":"2026-10-22","orgs":["Anthropic"],"title":"Anthropic: Claude flags 493 attack-surface issues in 25 open-source projects, including a 21-year-old silent auth bypass and 16% of OpenSSH's pre-auth code","summary":"Anthropic's Frontier Red Team published on Oct 20, 2026 a method in which Claude maps which code in a project is reachable by default and removes what a deployment doesn't need. Across 25 open-source projects (5M+ lines of C, C++, Java, PHP and Python) it found 493 issues, including 94 configurations that silently disabled a security control, a 21-year-old option conflict that dropped a certificate check, and ~4,500 lines of experimental ML-DSA code reachable before authentication in OpenSSH.","key_facts":["Scope: 25 projects (10 public, 11 gated, 4 private), 5M+ lines; Claude catalogued 17,000+ configuration options, 3,842 security-relevant","Findings: 493 issues across three methods (default configuration, configuration interaction, early reachability); 162 risky option combinations accepted without warning, 94 of which silently disabled a security control","All 11 gated projects had unintentionally reachable code, including 93 unnecessary pre-authentication surfaces in default configurations","A hostname-based deny rule failed open when reverse DNS was off, a pattern found independently in four projects","21-year-old bug: a certificate-requirement option conflicted with another option and silently dropped the check, letting unauthenticated clients reach request-handling code","OpenSSH: ~4,500 lines of experimental ML-DSA-44 signature code reachable by unauthenticated clients in default sshd, about 16% of pre-auth code; fixed in 10.5 and 10.6, which 'removed roughly a fifth' of the code an unauthenticated client could reach","Method released as a reusable Claude skill being integrated into OSS-Scanner (three fresh-context passes, findings confirmed with dynamic traces and test suites); author Chris Rohlf"],"key_numbers":[],"tags":["cybersecurity","claude","open-source","attack-surface","openssh","frontier-red-team","defensive-ai"],"science":null,"body_md":"## What happened\n\nInstead of hunting individual bugs, Claude was asked to shrink what an attacker can reach at all: code enabled by default that no\ndefault feature needs, option combinations that quietly turn off protections, and sensitive parsing that runs before authentication.\nMaintainers were sent reports and patches.\n\n## Why it matters\n\nIt shows frontier models doing defensive hardening at scale, reducing the impact of bugs nobody has found yet. It was published the\nday before PHP2Shell, the AI-found PHP flaw that took sites offline worldwide.","disputed":[],"related":[{"id":"2026-10-21-php2shell-ai-found-php-rce","url":"https://postcutoff.com/e/2026-10-21-php2shell-ai-found-php-rce/","date":"2026-10-21","date_precision":"day","short_title":"PHP2Shell: critical remote-code-execution flaws in PHP, found with GPT-5.6 Sol and Gemini 4 Argon, force emergency patching and take websites offline worldwide","deck":null,"takeaway":"The bugs were found with frontier AI: by Calif with GPT-5.6 Sol under OpenAI's Patch the Planet programme, and by Google's Wiz with Gemini 4 Argon, GPT-5.6 Sol and its Wiz Atlas agent.","category":"policy-safety","category_label":"Policy & safety","importance":5,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":7,"official":4,"filed":"2026-10-22","updated":"2026-10-22","orgs":["OpenAI","Wiz","Google","PHP"]},{"id":"2026-10-08-anthropic-cyber-mission-critical-infrastructure","url":"https://postcutoff.com/e/2026-10-08-anthropic-cyber-mission-critical-infrastructure/","date":"2026-10-08","date_precision":"day","short_title":"Anthropic Cyber Mission: critical-infrastructure program and free open-source scanning","deck":null,"takeaway":"Anthropic's strongest models now find and exploit vulnerabilities at a level that banks and governments treat as a systemic risk.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":8,"official":3,"filed":"2026-10-08","updated":"2026-10-16","orgs":["Anthropic","CrowdStrike","Palo Alto Networks","Dragos","Accenture","Deloitte"]}],"people":[],"posts":[],"videos":[],"models":[],"changes":[{"date":"2026-10-22","type":"filed","text":"Created (Techmeme + HN)"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-10-22","run":null,"sources_read":null,"updated":"2026-10-22","human_review":null,"version":null},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":173,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":112,"in_training_data":false},{"model_id":"gemini-4-argon","name":"Gemini 4 Argon","cutoff":"2026-03","days_after":203,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":142,"in_training_data":false}],"short_url":null}