bit.fanBit.FanWeb3 News · Betting Reviews · Market Insights
‹ BackNewssoftware security

software security

Anthropic
2026-08-26 01:14:21

Anthropic says multi-agent systems may be AI’s next step, but coordination still breaks down on complex work

Anthropic said emerging multi-agent systems could become a major direction for AI as agent capabilities improve, with interactions between agents potentially exceeding both human-to-human and human-to-agent exchanges in the future. The company said current models still struggle with coordination in complex collaborative settings. In a software vulnerability detection experiment, Anthropic deployed 45 agents at the same time. Claude Mythos Preview, running in an independent parallel setup, used 6.5 million tokens and found 21 vulnerabilities. A collaborative agent cluster used 27 million tokens and found 266 vulnerabilities. Anthropic said agents can develop tools on their own during collaboration and gradually split into specialized roles. It expects this combination of specialization and collaboration to outperform pure parallel brute-force search over time. Even so, the company said multi-agent performance remained weak in software development tasks that require strong interdependence. Anthropic tested free-form collaboration, preset roles, and organizational structures including a "CEO agent," but said none of them clearly improved final results. For now, the company said complex multi-agent projects still need substantial human guidance.

1390
Anthropic says multi-agent systems may be AI’s next step, but coordination still breaks down on complex work
Rust
2026-08-21 02:54:54

Malicious Rust packages were live for 86 minutes, affecting tools used across Solana and Ethereum

Attackers pushed malicious versions of three widely used Rust packages in a supply-chain attack, according to Cryptopolitan. One of the compromised libraries, arrayref, is used by roughly three-quarters of Rust development environments. The malicious update concealed a backdoor that could automatically steal login credentials when users compiled projects, potentially exposing both machines and keys for anyone who built affected versions. Wiz researchers said the command-and-control path tied to the arrayref attack overlapped with infrastructure linked to the Mastra campaign used by North Korean hacking group Sapphire Sleet and UNC1069. The IP addresses shared the same security certificate and used the same hosting provider, Hostwinds. The attacker did not alter the original codebase. Instead, they added a typo-squatted dependency, proc-macro1, designed to resemble the popular proc-macro2, allowing the package to pass tests and builds. The malicious release was removed 86 minutes after publication, but it had already been widely downloaded. The affected packages are broadly used in Solana and Ethereum tooling, and the Rust team believes the maintainers were not acting maliciously, with their devices or credentials possibly compromised.

1050
Malicious Rust packages were live for 86 minutes, affecting tools used across Solana and Ethereum