Opus 4.6 uncovers 500 zero-day flaws in open-source code

axios.com
February 5, 2026
3 min read
58/100
Summary
Anthropic's newest AI model, Claude Opus 4.6, has identified over 500 previously unknown high-severity security flaws in open-source libraries with minimal prompting. This advancement demonstrates the potential of AI tools to enhance cybersecurity defenses.
Key Takeaways
- Anthropic's AI model, Claude Opus 4.6, discovered over 500 previously unknown high-severity security flaws in open-source libraries during testing.
- The model utilized its out-of-the-box capabilities and advanced reasoning skills to identify vulnerabilities that traditional security tools failed to detect.
- Anthropic plans to enhance security controls in Claude Opus 4.6 to prevent potential misuse of its cyber capabilities while collaborating with the security research community.
- The vulnerabilities identified by Claude included critical flaws in popular utilities like GhostScript and OpenSC, which could lead to system crashes and memory corruption.
Coverage & discussions
Hacker News · axios.com
Community discussions
Community Sentiment
Concerns
- The claims of uncovering 500 vulnerabilities lack supporting evidence, raising skepticism about their validity and the overall effectiveness of the system.
- Concerns about the reliability of the findings are heightened by previous instances of false security issues, suggesting a pattern of overstatement in AI security claims.
- The limited examples provided may indicate cherry-picking, which undermines the credibility of the reported vulnerabilities and their significance.
- If the system does not work consistently, the value of discovering vulnerabilities is significantly diminished, impacting trust in the AI's capabilities.
Related Articles

Evaluating and mitigating the growing risk of LLM-discovered 0-days
Feb 5, 2026

Expanding Project Glasswing
Jun 2, 2026

A leak reveals that Anthropic is testing a more capable AI model "Claude Mythos"
Mar 27, 2026
Making frontier cybersecurity capabilities available to defenders
Feb 20, 2026

Claude Mythos AI unauthorised access claim probed by Anthropic
Apr 22, 2026