Anthropic finds 94 cases where open-source projects drop security controls without warning

Anthropic's Frontier Red Team used its Claude model to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and code running before security checks, including 94 cases where projects dropped security controls without warning. The findings, published October 22, center on attack surface reduction — limiting the parts of software an attacker can reach by restricting access to unnecessary features or moving security checks ahead of risky code.

Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and code running before security checks. Attack surface reduction means limiting the parts of software an attacker can reach. Instead of waiting to discover a vulnerability, developers can restrict access to unnecessary features or move security checks ahead of … More https://www.helpnetsecurity.com/2026/10/22/anthropic-attack-surface-reduction-open-source/ The post Anthropic finds 94 cases where open-source projects drop security controls without warning https://www.helpnetsecurity.com/2026/10/22/anthropic-attack-surface-reduction-open-source/ appeared first on Help Net Security https://www.helpnetsecurity.com .