\n<\/p>\n
In a recent security partnership with Mozilla, Anthropic found 22 separate vulnerabilities<\/a> in Firefox \u2014 14 of them classified as \u201chigh-severity.\u201d Most of the bugs have been fixed in Firefox 148<\/a> (the version released this February), although a few fixes will have to wait for the next release.<\/p>\n Anthropic\u2019s team used Claude Opus 4.6 over the span of two weeks, starting in the javascript engine and then expanding to other portions of the codebase. According to the post, the team focused on Firefox because \u201cit\u2019s both a complex codebase and one of the most well-tested and secure open-source projects in the world.\u201d<\/p>\n Notably, Claude Opus was much better at finding vulnerabilities than writing software to exploit them. The team ended up spending $4,000 in API credits trying to concoct proof-of-concept exploits, but only succeeded in two cases.<\/p>\n Still, it\u2019s a reminder of how powerful AI tools can be for open-source projects \u2014 even if they bring a flood of bad merge requests<\/a> alongside the useful ones.<\/p>\n<\/div>\n