Mozilla Fixes 271 Firefox Bugs with Anthropic Mythos
Mozilla announced that its Firefox 150 browser, released this week, addresses 271 vulnerabilities. The team spotted these issues through early access to Anthropic's Mythos Preview. Firefox developers expect a challenging shift as AI tools reveal bugs quickly, though they doubt AI will overhaul cybersecurity in the long run.
The Firefox group dedicated time and effort to handle the surge of flaws AI detected. They see this work as vital to protect users, since such tools will soon reach adversaries. Both Anthropic and OpenAI recently unveiled AI models with strong cybersecurity features. These could change how both defenders and attackers detect software weaknesses and setup errors.
So far, the firms limited releases to select partners and formed industry groups to evaluate the tech. Experts differ on the real effects of these advances.
Firefox's Hands-On Results with AI Bug Detection
Mozilla's recent efforts prove AI like Mythos Preview can transform bug hunting right away. "Our belief is that the tools have changed things dramatically, because now we have automated techniques that can cover, as far as we can tell, the full space of vulnerability-inducing bugs," says Bobby Holley, Firefox's chief technology officer.
For years, Firefox relied on automated methods such as software fuzzing, plus manual checks by staff and outside researchers. Attackers used similar approaches. "There were categories of bugs that you could find with human analysis that you couldn't find with automated analysis and, therefore, it was always possible if you were a threat actor and you were willing to spend many millions of dollars to find a bug, we tried to drive the price of that as high as possible," Holley explains.
Now, Holley views new AI as a training period. All software must uncover and repair hidden flaws. Anthropic and OpenAI aim to help big organizations complete this before broader access.
Stay ahead of the AI curve
The most important updates, news, and content — delivered weekly.
No spam. Unsubscribe anytime.
"Every piece of software is going to have to make this transition, because every piece of software has a lot of bugs buried underneath the surface that are now discoverable," Holley states. "This is a transitory moment that is difficult and requires coordinated focus and a lot of grit to get through, but I think that it is a finite moment, even as the models become more advanced. Maybe the more advanced models will find a few things here or there, but I believe that, at least on the Firefox side having had a bit of a head start here, that we've rounded the curve."
Mozilla accessed Mythos Preview through direct work with Anthropic. The company joins Project Glasswing informally, not as a full member.
Open Source Faces Unique Pressures
Firefox runs as open source software. This model often involves widespread use by global projects, maintained by few volunteers or single individuals. Unmaintained "abandonware" could suffer most from AI-driven bug finds.
Holley stresses alerting maintainers to the demands of AI-era security, including time and funds. "I've talked to engineering leaders at very large companies who are saying that they're going to be pulling thousands of engineers off of everything to be working on this for the next six months," he notes. "So it is going to be a big challenge for industry, and the concern is for smaller projects and open source. It's difficult for these maintainers to not only have the wherewithal and the access to be able to use these tools, but also to actually do anything with them."
Last week, in a New York Times Opinion piece, Mozilla CTO Raffi Krikorian pointed out persistent issues. "The underlying economics haven't changed," Krikorian wrote. "The most valuable software infrastructure in the world continues to be maintained by people working for free, while the companies building fortunes on top of it never had to pay for its upkeep. Now a powerful new capability has arrived, and as we've seen repeatedly in tech, there's the risk that organizations with resources will receive it first and learn to protect themselves, while others are left vulnerable."
Holley adds that his team connects with open source maintainers formally and casually to share insights and methods. "Ultimately the open source stuff is a human problem," he says. "There's only so much that you can scale with technology, there's a lot of the industry and everybody just needing to come together."
Mozilla, founded in 2003, develops the Firefox browser as a free, open source alternative to dominant options like Chrome. Anthropic focuses on safe AI systems, including models like Claude, with Mythos as a new cybersecurity-focused preview.