Anthropic officially announces the launch of Cyber Mission, a long-term commitment aimed at strengthening the security of the systems everyone relies on. Cyber Mission is a new initiative designed to provide defenders with tools, research, and resources to safeguard their software and systems. The initiative initially focuses on two areas:
Strengthening Critical Infrastructure Security
First, Cyber Mission will focus on securing critical infrastructure, including the operational technology that runs power grids, water systems, and transportation networks, as well as protecting government systems. Today, Anthropic officially launches the Critical Infrastructure Defense Program (CIDP), which brings the most advanced models, field engineers, and threat research to defenders protecting operational technology.
"These systems, known as operational technology, often cannot be taken offline for patching, so known vulnerabilities may remain unaddressed for extended periods."
Anthropic
The program's founding partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation. These organizations represent advisors and advanced technology companies for operational security programs, and provide security services protecting enterprise and industrial networks.
Improving Open Source Software Security
Second, Cyber Mission will focus on open source software security, because nearly all software depends on open source code, much of which is maintained by small volunteer teams. Today, Anthropic officially launches OSS Scanner, a service providing regular security scans for open source projects, completely free of charge.
"Our goal is to get discovered issues to maintainers faster and accelerate the patching process."
Anthropic
OSS Scanner will provide regular scans for registered projects, with reports including proof-of-concept exploits, explanations, and recommended fixes for vulnerabilities. The service aims to help projects with the capacity to act on findings; for other projects, Anthropic will continue to share human-verified disclosures in accordance with its coordinated vulnerability disclosure policy.
Future Directions
Anthropic states that, guided by open source maintainers and foundations, it will advance open source efforts further, including exploring new security architectures and coding practices, and sharing methods for hardening or rewriting code. The company also plans to expand Cyber Mission to release new tools, research, and resources to help strengthen security worldwide.
Source: Anthropic official announcement