● Covered by 1 source · 1 reportMedium impact1 neutral
Visa open-sources vulnerability agentic harness after using Anthropic's Mythos to find bugs
Key points
- Visa used Anthropic's Mythos AI to find vulnerabilities in its payment network.
- The AI identified exploit chains that would typically surface late in penetration testing.
- Visa open-sourced the "Visa Vulnerability Agentic Harness" on GitHub.
- A technical white paper detailing architecture and practices was also published.
AI-Powered Vulnerability Discovery
Visa deployed Anthropic's Claude Mythos AI model to analyze the infrastructure supporting its global payment network. This network handles billions of daily transactions across over 200 countries and territories, involving approximately 160 currencies and connecting nearly 5 billion payment credentials to more than 175 million merchant locations. The AI model was able to link minor weaknesses within the system into functional exploit chains, which traditionally would only be discovered much later in the penetration testing cycle.
Open-Sourcing the Harness
Following its internal use, Visa open-sourced the "Visa Vulnerability Agentic Harness" on GitHub. This harness governed the entire vulnerability hunt process. Rajat Taneja, Visa's president of technology, co-authored a blog post announcing this release, presenting it as a reference implementation for other security teams to examine, modify, and expand upon. The company also released a technical white paper outlining the architecture, lessons learned, and 12 essential architectural practices for critical infrastructure.
Project Glasswing Participation
Visa participated in Anthropic's Project Glasswing, an initiative inviting organizations with critical software to test Mythos. According to Anthropic, Glasswing participants collectively identified over 10,000 high- or critical-severity vulnerabilities in the first month across critical systems industry-wide. Visa joined to assess its decades of hardened defenses against AI-driven analysis and to understand how advanced models could further enhance its security measures.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub visa/visa-vulnerability-agentic-harnessReporting from
Visa used Anthropic's Mythos AI model to identify vulnerabilities in its payment network infrastructure and subsequently open-sourced the "Visa Vulnerability Agentic Harness" used in the process. This initiative provides a reference implementation for other security teams to inspect, adapt, and extend their own vulnerability discovery efforts using AI.