Anthropic
Squidbleed: A 29-Year-Old Proxy Bug Falls to AI-Assisted Auditing
CVE-2026-47729 sat in Squid's FTP parser since January 1997, leaking strangers' credentials from heap memory. Researchers found it three times in three months — one team with Claude Mythos reading the code.
Jul 7, 2026
