Steve Gibson

speaker

30,295 appearances 25 recordings 1 series first heard May 2026 last heard 4d ago

Steve Gibson’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 25 in all, peaking in Sep 2026 with 8.

Appearances

newest first · ▶ plays the moment

Security Now (Audio) · SN 1096: Are we the Krell? - 153 Million Driver's Licenses Leaked · 16 Sep 2026 podcast

That's why, for example, we keep seeing 7.8. voice-verified

There are specific characteristics that cause that you know that set this the C VSS at 7.8 rather than just some dice roll or somebody's, you know, off-the-cuff opinion. voice-verified

Anyway, so he says across the ledger, 18 revealed findings were patched before Anthropic reported the vulnerability to the maintainer. voice-verified

He says this isn't this not particularly particularly surprising given the volume of findings that Anthropic is sitting on, which highlights the importance of reporting these vulnerabilities quickly. voice-verified

Given that less than 10% of the findings have been reported to maintainers, he says, I suspect this issue will compound over time as findings age and maintainers or other researchers find and fix them on their own. voice-verified

We've seen how AI-discovered vulnerabilities contribute to research collisions, where multiple researchers all report the same. voice-verified

Same vulnerability. voice-verified

The ledger has received only two bulk updates, so results are not published in real time. voice-verified

It's worth highlighting that while the ledger has a public reveal date, as we saw with the recent update, that date does not reflect the actual day the finding was revealed in the ledger. voice-verified

So, what takeaways do we have from the Anthropic Glass Wing Ledger after five months? voice-verified

Do not discount the reality that AI tools like Claude are incredibly valuable and useful for discovering vulnerabilities. voice-verified

AI can help accelerate the discovery of bugs and vulnerabilities in software, as the evidence I've discussed across software suppliers. voice-verified

And the CVE program shows. voice-verified

This blog aims to better understand the claims that Anthropic and other Frontier Model providers have made about Project Glasswing. voice-verified

And to see if the evidence aligns with those claims. voice-verified

It appears there are many discrepancies in the data they published, which is still a small fraction of the findings after five months. voice-verified

The receipts are starting to trickle in and they just don't reconcile. voice-verified

Okay, so what's interesting. voice-verified

Isn't that? voice-verified

I mean, like what a tiny percentage uh like why? voice-verified

Showing 2841–2860 of 30,295 · page 143 of 1515