Anthropic 推出免费 AI 扫描器检查开源项目漏洞，并启动关键基础设施防御计划
Anthropic launches a free AI scanner for open-source projects
- 1Anthropic 启动 Cyber Mission 长期计划，向电网、水务、交通运营方提供 Claude 模型、工程师与威胁分析
- 2配套免费 OSS 扫描器定期检查开源项目，自动标记并解释漏洞，并给出修补建议
- 3Anthropic 预计扫描准确率高于 90%，但报告未经人工审核即发布，可能存在错误
- 4CrowdStrike、Palo Alto Networks、Deloitte 与 Rockwell Automation 为创始伙伴，维护者可经 GitHub 申请
Anthropic 把 Claude 的安全能力做成基础设施与开源供应链的防御服务，回应防守方缺少同级 AI 工具的不对称。
- 影响：依赖开源组件的企业有望从相关项目获得免费漏洞扫描结果，供应链安全可见性提升；报告未经人工审核即发出，采纳前需要自行验证；能源、水务、交通类企业多了一条获取模型与专家资源的渠道。
- 参考：可考虑先盘点产品依赖的关键开源组件清单，留意其维护者是否加入扫描；值得为自动生成的漏洞报告设定人工复核流程；关键基础设施类企业可进一步了解 CIDP 的接入条件。
- 依据：扫描能力、准确率高于 90% 的预期与免人工审核均来自 Anthropic 官方口径，暂无独立验证；创始伙伴名单由官方公布。
Anthropic has launched Cyber Mission, a long-term program to protect critical infrastructure and open-source software from cyberattacks. Its Critical Infrastructure Defense Program (CIDP) gives operators of power grids, water systems, and transportation networks access to Claude models, engineers, and threat analysis. CrowdStrike, Palo Alto Networks, Deloitte, and Rockwell Automation are founding partners.
Separately, a free "OSS" AI scanner will regularly check open-source projects, automatically flag and explain vulnerabilities, and suggest patches. Nearly all modern software depends on open-source code, much of it maintained by small volunteer teams. Anthropic expects accuracy above 90 percent, but reports ship without human review and may contain errors. The company argues attackers already have powerful AI models, while defenders still lack comparable tools. Maintainers of projects critical to infrastructure or user safety can opt in via GitHub.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
来源：The Decoder：AI News · the-decoder.com