Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

Latest Breaking News

CousinIT

(12,934 posts)

3. That CISA is doing this is not surprising or too scary for me.

Reply to AZJonnie (Reply #2)

Tue Jul 7, 2026, 09:42 AM

Yesterday

If it uncovers vulnerabilities that need fixing (after human review of what they are and whether they're legit), then that's a good thing.

It would be almost negligent if they *didn't* use these tools to search for vulnerabilities, now that we have them. They can find them faster and easier than humans. If they produce hundreds of false positives and only a few legitimate vulnerabilities that can be fixed, it's worth it. Better that than those previously unseen vulnerabilities going unmitigated. Especially in critical systems.

Edit history

Please sign in to view edit histories.

Recommendations

1 members have recommended this reply (displayed in chronological order):

AZJonnie

3 replies

= new reply since forum marked as read

Highlight:

US cyber agency is using Anthropic's Mythos to audit government code, sources say [View all] BumRushDaShow Yesterday OP

claude seeking vulnerability in government code rampartd Yesterday #1

Sounds pretty logical actually, assuming the story is accurate AZJonnie Yesterday #2

That CISA is doing this is not surprising or too scary for me. CousinIT Yesterday #3