> ## Content Index
> Fetch the complete content index at: https://www.bushletter.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Anthropic security executive warns AI-found software flaws will get worse for 18 months
- URL: https://www.bushletter.com/ai-finds-493-flaws-security-chief-warns-18-months-of-pain-ahead/
- Published: 2026-10-23T05:30:00.000Z
- Updated: 2026-10-23T05:30:00.000Z
- Description: On 22 October 2026, Jason Clinton, security chief at Anthropic, posted a blunt warning: "as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now.
- Author: Bushletter Newsroom
- Tags: Cybersecurity, Australia, AI Security, Anthropic

TLDR

Anthropic's Claude audited 25 open-source projects and found 493 security issues, including a configuration conflict undetected for 21 years. Anthropic security executive Jason Clinton warned conditions will worsen before improving, urging boards to fund basic cyber hygiene now.

KEY TAKEAWAYS

01Claude found 493 security issues across 25 open-source projects, including a 21-year-old configuration conflict.

02Jason Clinton, Anthropic's deputy chief information security officer, said organisations need to hold on for roughly 18 months.

03OpenAI expects similar AI-found vulnerability disclosures to increase sharply in the coming months.

04An AI-assisted find in the Linux kernel gave local users root access on versions 4.11 to 7.2-rc4; fixes have shipped.

05JPMorgan blocks services that use shared banking credentials to move customer money, and Morgan Stanley has begun blocking third-party AI agents.

## The warning from inside the lab

On 22 October 2026, Jason Clinton, Anthropic's deputy chief information security officer, posted a blunt warning on X: "as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for \~18 months.)"[\[1\]](https://x.com/JasonDClinton/status/2113325263157395456?ref=bushletter.com)

Clinton posted two days after Anthropic published research in which its Claude model audited 25 open-source projects for security weaknesses, and a day after PHP shipped emergency fixes for the PHP2Shell flaws that AI helped find ([Bushletter's live coverage](https://www.bushletter.com/php-patches-two-critical-rce-flaws-affecting-69-of-websites/)). The same tools that let defenders find flaws faster are available to attackers.

## What Claude actually found

Anthropic's Frontier Red Team examined 25 open-source projects and discovered 493 issues across default configuration, early reachability and configuration interaction methods.[\[2\]](https://www.anthropic.com/research/attack-surface-reduction?ref=bushletter.com) In 94 of those cases, combinations of settings silently disabled a security control without surfacing any warning to the administrator.[\[2\]](https://www.anthropic.com/research/attack-surface-reduction?ref=bushletter.com)

One conflicting option set had existed undetected for 21 years before Claude identified it.[\[2\]](https://www.anthropic.com/research/attack-surface-reduction?ref=bushletter.com) The audit also found roughly 4,500 lines of experimental ML-DSA-44 code reachable by unauthenticated clients inside OpenSSH 10.4, an exposure later patched in versions 10.5 and 10.6.[\[2\]](https://www.anthropic.com/research/attack-surface-reduction?ref=bushletter.com) OpenSSH is among the most scrutinised software on the internet, which is what makes the finding notable.

## A converging wave of disclosures

OpenAI made its own disclosure around the same period, describing vulnerabilities its models had already identified across critical software. OpenAI said the PHP bugs "are among several significant vulnerabilities we’ve already found and are working to fix", and that it expects similar findings to rise sharply in the coming months.[\[3\]](https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/?ref=bushletter.com)

The Linux kernel's vhost subsystem drew scrutiny during the same period. CVE-2026-74580, found by Tencent's Zhuque Lab with its Corvus AI system, lets a local user gain full control of a machine on kernels from version 4.11 to 7.2-rc4\. Fixes have shipped in stable kernels and from major Linux distributions.[\[4\]](https://thehackernews.com/2026/10/ai-found-linux-kernel-flaw-gives-local.html?ref=bushletter.com) The flaw's long version span reflects the pattern Clinton described: vulnerabilities embedded in widely used code, surviving across years of routine maintenance.

Indian certificate authority eMudhra had its own crisis. On 17 October 2026 a researcher reported that the private keys behind eight of its intermediate certificates were weak enough to recover, which would let anyone issue certificates browsers trusted. Chrome and Firefox blocked them that night, and Apple and Microsoft followed by 20 October.[\[5\]](https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html?ref=bushletter.com) Security researcher Scott Helme said one of the keys was the number 4, and that an AI agent recovered the keys from a single prompt.[\[5\]](https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html?ref=bushletter.com)

## Banks block AI agents

On JPMorgan Chase's third-quarter earnings call on 13 October, chief financial officer Jeremy Barnum said services that move customers' money using shared banking credentials are being shut out. "It's not secure, and so to the extent that we're able to block those, we are blocking them," he said, adding that this was "to protect customers and protect ourselves."[\[6\]](https://www.americanbanker.com/news/jpmorgan-warns-of-risks-to-consumers-who-rely-on-ai-agents?ref=bushletter.com) On 22 October Axios reported that Morgan Stanley has begun blocking third-party AI agents and that other large US banks are restricting them; banks say they cannot reliably tell an agent a customer authorised from one acting on its own.

JPMorgan's decision to impose hard blocks rather than rely on policy controls carries a direct message for Australian boards. Organisations that have deployed third-party AI agents with access to financial systems and sensitive credentials, without reviewing how those agents authenticate and what they can authorise, carry risk that JPMorgan has already concluded warrants active blocking.

Clinton asked boards for help with "the basics", not AI. For Australian organisations that means patching internet-facing systems within 48 hours when a critical flaw or working exploit exists, as the Essential Eight requires; knowing what software and appliances they run; turning on multifactor authentication; and refusing any service that asks staff or customers to hand over passwords to an AI agent. The [AI and security series](https://www.bushletter.com/tag/ai-security/) follows the fallout.

SOURCES & CITATIONS

1. [Jason Clinton post on X, 22 October 2026](https://x.com/JasonDClinton/status/2113325263157395456?ref=bushletter.com)
2. [Anthropic Frontier Red Team, Attack Surface Reduction Research](https://www.anthropic.com/research/attack-surface-reduction?ref=bushletter.com)
3. [OpenAI, Coordinated Disclosure of Critical Vulnerabilities](https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/?ref=bushletter.com)
4. [Tencent FinCloud, CVE-2026-74580 Linux kernel vhost advisory](https://thehackernews.com/2026/10/ai-found-linux-kernel-flaw-gives-local.html?ref=bushletter.com)
5. [eMudhra, Certificate Security Incident](https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html?ref=bushletter.com)
6. [JPMorgan Chase Q3 2026 Earnings Call Transcript](https://www.americanbanker.com/news/jpmorgan-warns-of-risks-to-consumers-who-rely-on-ai-agents?ref=bushletter.com)

FREQUENTLY ASKED QUESTIONS

What did Anthropic's Claude find in its open-source security audit?

Claude examined 25 open-source projects and found 493 issues. In 94 cases, combinations of settings silently disabled a security control. One such conflict had gone undetected for 21 years, and roughly 4,500 lines of experimental OpenSSH code were found reachable by unauthenticated clients.

Why is JPMorgan Chase blocking AI agents?

JPMorgan Chase chief financial officer Jeremy Barnum said on the bank's 13 October earnings call that it blocks services that move customer money using shared banking credentials, because they are not secure.

What does Anthropic's Jason Clinton mean by 18 months?

Jason Clinton, Anthropic's deputy chief information security officer, posted on 22 October 2026 that conditions would worsen before improving, and urged security leaders to seek board support for basic cyber hygiene immediately, naming an approximate 18-month window to get through the current period of accelerating AI-driven vulnerability discovery.