{"id":1044,"date":"2026-04-23T16:05:53","date_gmt":"2026-04-23T09:05:53","guid":{"rendered":"https:\/\/vncybers.vn\/anthropic-ra-mat-claude-mythos-va-project-glasswing-de-bao-ve-an-ninh-mang\/"},"modified":"2026-04-23T21:26:38","modified_gmt":"2026-04-23T14:26:38","slug":"anthropic-ra-mat-claude-mythos-va-project-glasswing-de-bao-ve-an-ninh-mang","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/anthropic-ra-mat-claude-mythos-va-project-glasswing-de-bao-ve-an-ninh-mang\/","title":{"rendered":"Anthropic ra m\u1eaft Claude Mythos v\u00e0 Project Glasswing \u0111\u1ec3 b\u1ea3o v\u1ec7 an ninh m\u1ea1ng"},"content":{"rendered":"
\"Anthropic<\/figure>\n\n\n\n

Ng\u00e0y 7 th\u00e1ng 4 n\u0103m 2026, Anthropic ch\u00ednh th\u1ee9c c\u00f4ng b\u1ed1 Claude Mythos Preview, m\u00f4 h\u00ecnh ng\u00f4n ng\u1eef th\u1ebf h\u1ec7 m\u1edbi v\u1edbi kh\u1ea3 n\u0103ng b\u1ea3o m\u1eadt m\u00e0 c\u00f4ng ty g\u1ecdi l\u00e0 “b\u01b0\u1edbc ngo\u1eb7t c\u00f3 th\u1ec3 \u0111\u1ecbnh h\u00ecnh l\u1ea1i to\u00e0n b\u1ed9 ng\u00e0nh an ninh m\u1ea1ng”. C\u00f9ng v\u1edbi \u0111\u00f3, Anthropic ra m\u1eaft Project Glasswing, m\u1ed9t li\u00ean minh g\u1ed3m h\u01a1n 45 t\u1ed5 ch\u1ee9c c\u00f4ng ngh\u1ec7 v\u00e0 b\u1ea3o m\u1eadt h\u00e0ng \u0111\u1ea7u th\u1ebf gi\u1edbi, \u0111\u1ec3 chu\u1ea9n b\u1ecb cho nh\u1eefng t\u00e1c \u0111\u1ed9ng to l\u1edbn m\u00e0 m\u00f4 h\u00ecnh n\u00e0y c\u00f3 th\u1ec3 mang l\u1ea1i.<\/p>\n\n\n\n

Khi AI t\u1ef1 t\u00ecm ra l\u1ed7 h\u1ed5ng m\u00e0 con ng\u01b0\u1eddi b\u1ecf s\u00f3t<\/h2>\n\n\n\n

Claude Mythos Preview kh\u00f4ng \u0111\u01b0\u1ee3c Anthropic hu\u1ea5n luy\u1ec7n \u0111\u1eb7c bi\u1ec7t cho b\u1ea3o m\u1eadt. CEO Dario Amodei gi\u1ea3i th\u00edch r\u1eb1ng nh\u00f3m ch\u1ec9 \u0111\u01a1n gi\u1ea3n l\u00e0 hu\u1ea5n luy\u1ec7n m\u00f4 h\u00ecnh gi\u1ecfi v\u1ec1 code, v\u00e0 kh\u1ea3 n\u0103ng b\u1ea3o m\u1eadt n\u1ed5i b\u1eadt l\u00e0 h\u1ec7 qu\u1ea3 t\u1ef1 nhi\u00ean t\u1eeb \u0111\u00f3. Tuy nhi\u00ean, k\u1ebft qu\u1ea3 \u0111\u1ea1t \u0111\u01b0\u1ee3c trong qu\u00e1 tr\u00ecnh ki\u1ec3m th\u1eed n\u1ed9i b\u1ed9 khi\u1ebfn ngay c\u1ea3 \u0111\u1ed9i ng\u0169 Anthropic c\u0169ng b\u1ea5t ng\u1edd.<\/p>\n\n\n\n

Trong c\u00e1c th\u1eed nghi\u1ec7m, Mythos Preview c\u00f3 th\u1ec3 t\u1ef1 ph\u00e1t hi\u1ec7n v\u00e0 khai th\u00e1c l\u1ed7 h\u1ed5ng zero-day tr\u00ean m\u1ecdi h\u1ec7 \u0111i\u1ec1u h\u00e0nh l\u1edbn v\u00e0 m\u1ecdi tr\u00ecnh duy\u1ec7t ph\u1ed5 bi\u1ebfn. Nhi\u1ec1u l\u1ed7i trong s\u1ed1 n\u00e0y \u0111\u00e3 t\u1ed3n t\u1ea1i h\u00e0ng ch\u1ee5c n\u0103m m\u00e0 kh\u00f4ng b\u1ecb ph\u00e1t hi\u1ec7n. L\u1ed7i c\u0169 nh\u1ea5t \u0111\u01b0\u1ee3c ghi nh\u1eadn l\u00e0 m\u1ed9t l\u1ed7 h\u1ed5ng 27 n\u0103m tu\u1ed5i trong OpenBSD, h\u1ec7 \u0111i\u1ec1u h\u00e0nh v\u1ed1n n\u1ed5i ti\u1ebfng l\u00e0 m\u1ed9t trong nh\u1eefng h\u1ec7 th\u1ed1ng an to\u00e0n nh\u1ea5t th\u1ebf gi\u1edbi.<\/p>\n\n\n\n

M\u00f4 h\u00ecnh kh\u00f4ng ch\u1ec9 t\u00ecm ra c\u00e1c l\u1ed7 h\u1ed5ng \u0111\u01a1n l\u1ebb. Trong m\u1ed9t tr\u01b0\u1eddng h\u1ee3p, Mythos Preview t\u1ef1 vi\u1ebft m\u1ed9t exploit cho tr\u00ecnh duy\u1ec7t web b\u1eb1ng c\u00e1ch k\u1ebft h\u1ee3p b\u1ed1n l\u1ed7 h\u1ed5ng ri\u00eang bi\u1ec7t, s\u1eed d\u1ee5ng k\u1ef9 thu\u1eadt JIT heap spray ph\u1ee9c t\u1ea1p \u0111\u1ec3 tho\u00e1t kh\u1ecfi c\u1ea3 sandbox c\u1ee7a renderer l\u1eabn h\u1ec7 \u0111i\u1ec1u h\u00e0nh. \u1ede m\u1ed9t tr\u01b0\u1eddng h\u1ee3p kh\u00e1c, m\u00f4 h\u00ecnh t\u1ef1 vi\u1ebft m\u00e3 khai th\u00e1c th\u1ef1c thi l\u1ec7nh t\u1eeb xa tr\u00ean m\u00e1y ch\u1ee7 NFS c\u1ee7a FreeBSD, cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng ch\u01b0a x\u00e1c th\u1ef1c gi\u00e0nh quy\u1ec1n root.<\/p>\n\n\n\n

\u0110i\u1ec1u \u0111\u00e1ng ch\u00fa \u00fd h\u01a1n l\u00e0 ngay c\u1ea3 ng\u01b0\u1eddi kh\u00f4ng c\u00f3 n\u1ec1n t\u1ea3ng b\u1ea3o m\u1eadt chuy\u00ean s\u00e2u c\u0169ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng Mythos Preview \u0111\u1ec3 th\u1ef1c hi\u1ec7n nh\u1eefng vi\u1ec7c t\u01b0\u01a1ng t\u1ef1. C\u00e1c k\u1ef9 s\u01b0 t\u1ea1i Anthropic kh\u00f4ng c\u00f3 \u0111\u00e0o t\u1ea1o b\u1ea3o m\u1eadt ch\u00ednh th\u1ee9c \u0111\u00e3 th\u1eed nghi\u1ec7m: h\u1ecd y\u00eau c\u1ea7u m\u00f4 h\u00ecnh t\u00ecm l\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa r\u1ed3i \u0111i ng\u1ee7, v\u00e0 s\u00e1ng h\u00f4m sau c\u00f3 s\u1eb5n m\u1ed9t exploit ho\u00e0n ch\u1ec9nh \u0111ang ch\u1edd.<\/p>\n\n\n\n

Kho\u1ea3ng c\u00e1ch th\u1ebf h\u1ec7 so v\u1edbi m\u00f4 h\u00ecnh tr\u01b0\u1edbc<\/h2>\n\n\n\n

\u0110\u1ec3 h\u00ecnh dung m\u1ee9c \u0111\u1ed9 c\u1ea3i thi\u1ec7n, nh\u00f3m nghi\u00ean c\u1ee9u Anthropic so s\u00e1nh tr\u1ef1c ti\u1ebfp v\u1edbi Opus 4.6, phi\u00ean b\u1ea3n m\u00f4 h\u00ecnh tr\u01b0\u1edbc \u0111\u00f3. Trong b\u00e0i ki\u1ec3m tra v\u1edbi engine JavaScript c\u1ee7a Firefox 147, Opus 4.6 th\u00e0nh c\u00f4ng khai th\u00e1c ch\u1ec9 2 l\u1ea7n trong v\u00e0i tr\u0103m l\u1ea7n th\u1eed. Mythos Preview th\u1ef1c hi\u1ec7n th\u1eed nghi\u1ec7m t\u01b0\u01a1ng t\u1ef1 v\u00e0 th\u00e0nh c\u00f4ng 181 l\u1ea7n, c\u1ed9ng th\u00eam 29 l\u1ea7n \u0111\u1ea1t \u0111\u01b0\u1ee3c register control.<\/p>\n\n\n\n

\u0110\u1ed9i ng\u0169 red team c\u1ee7a Anthropic c\u0169ng ph\u00e1t tri\u1ec3n c\u00e1c scaffold cho ph\u00e9p Mythos Preview t\u1ef1 \u0111\u1ed9ng chuy\u1ec3n \u0111\u1ed5i t\u1eeb l\u1ed7 h\u1ed5ng \u0111\u00e3 bi\u1ebft th\u00e0nh exploit m\u00e0 kh\u00f4ng c\u1ea7n can thi\u1ec7p c\u1ee7a con ng\u01b0\u1eddi. Anthropic x\u00e1c nh\u1eadn \u0111\u00e3 t\u00ecm th\u1ea5y h\u00e0ng ngh\u00ecn l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong qu\u00e1 tr\u00ecnh ki\u1ec3m th\u1eed, h\u01a1n 99% trong s\u1ed1 \u0111\u00f3 ch\u01b0a \u0111\u01b0\u1ee3c v\u00e1 n\u00ean kh\u00f4ng th\u1ec3 c\u00f4ng b\u1ed1 chi ti\u1ebft theo ch\u00ednh s\u00e1ch ti\u1ebft l\u1ed9 c\u00f3 ph\u1ed1i h\u1ee3p c\u1ee7a c\u00f4ng ty.<\/p>\n\n\n\n

Project Glasswing, li\u00ean minh ph\u00f2ng th\u1ee7 tr\u01b0\u1edbc khi qu\u00e1 mu\u1ed9n<\/h2>\n\n\n\n

\u0110\u1eb7t t\u00ean theo lo\u00e0i b\u01b0\u1edbm c\u00f3 c\u00e1nh trong su\u1ed1t, Project Glasswing l\u00e0 s\u00e1ng ki\u1ebfn c\u1ee7a Anthropic nh\u1eb1m cho ph\u00e9p c\u00e1c t\u1ed5 ch\u1ee9c quan tr\u1ecdng s\u1eed d\u1ee5ng Mythos Preview \u0111\u1ec3 r\u00e0 so\u00e1t h\u1ec7 th\u1ed1ng c\u1ee7a ch\u00ednh h\u1ecd tr\u01b0\u1edbc, tr\u01b0\u1edbc khi m\u00f4 h\u00ecnh ho\u1eb7c c\u00e1c m\u00f4 h\u00ecnh t\u01b0\u01a1ng \u0111\u01b0\u01a1ng tr\u1edf n\u00ean c\u00f3 s\u1eb5n r\u1ed9ng r\u00e3i h\u01a1n.<\/p>\n\n\n\n

Li\u00ean minh bao g\u1ed3m Microsoft, Apple, Google, Amazon Web Services, Linux Foundation, Cisco, Nvidia, Broadcom v\u00e0 h\u01a1n 40 t\u1ed5 ch\u1ee9c kh\u00e1c trong l\u0129nh v\u1ef1c c\u00f4ng ngh\u1ec7, b\u1ea3o m\u1eadt, c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng tr\u1ecdng y\u1ebfu v\u00e0 t\u00e0i ch\u00ednh. T\u1ea5t c\u1ea3 \u0111\u1ec1u c\u00f3 quy\u1ec1n truy c\u1eadp ri\u00eang v\u00e0o m\u00f4 h\u00ecnh \u0111\u1ec3 t\u1ef1 ki\u1ec3m tra v\u00e0 v\u00e1 l\u1ed7 h\u1ed5ng tr\u00ean n\u1ec1n t\u1ea3ng c\u1ee7a m\u00ecnh tr\u01b0\u1edbc khi b\u1ecb k\u1ebb t\u1ea5n c\u00f4ng khai th\u00e1c.<\/p>\n\n\n\n

“Th\u00f4ng \u0111i\u1ec7p th\u1ef1c s\u1ef1 kh\u00f4ng ph\u1ea3i v\u1ec1 m\u00f4 h\u00ecnh hay Anthropic”, Logan Graham, tr\u01b0\u1edfng nh\u00f3m frontier red team c\u1ee7a c\u00f4ng ty, n\u00f3i v\u1edbi Wired. “Ch\u00fang ta c\u1ea7n chu\u1ea9n b\u1ecb ngay t\u1eeb b\u00e2y gi\u1edd cho m\u1ed9t th\u1ebf gi\u1edbi m\u00e0 nh\u1eefng kh\u1ea3 n\u0103ng n\u00e0y tr\u1edf n\u00ean ph\u1ed5 bi\u1ebfn trong 6, 12, 24 th\u00e1ng t\u1edbi. Nhi\u1ec1u th\u1ee9 trong b\u1ea3o m\u1eadt s\u1ebd thay \u0111\u1ed5i. Nhi\u1ec1u gi\u1ea3 \u0111\u1ecbnh m\u00e0 ch\u00fang ta \u0111\u00e3 d\u00f9ng \u0111\u1ec3 x\u00e2y d\u1ef1ng c\u00e1c m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt hi\u1ec7n \u0111\u1ea1i c\u00f3 th\u1ec3 s\u1ee5p \u0111\u1ed5.”<\/p>\n\n\n\n

Microsoft CISO to\u00e0n c\u1ea7u Igor Tsyganskiy \u0111\u00e1nh gi\u00e1 cao s\u00e1ng ki\u1ebfn n\u00e0y: “Tham gia Project Glasswing cho ph\u00e9p ch\u00fang t\u00f4i x\u00e1c \u0111\u1ecbnh v\u00e0 gi\u1ea3m thi\u1ec3u r\u1ee7i ro s\u1edbm, c\u0169ng nh\u01b0 n\u00e2ng cao c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt \u0111\u1ec3 b\u1ea3o v\u1ec7 kh\u00e1ch h\u00e0ng t\u1ed1t h\u01a1n.”<\/p>\n\n\n\n

Nguy c\u01a1 k\u00e9p v\u00e0 b\u00e0i to\u00e1n ch\u01b0a c\u00f3 l\u1eddi gi\u1ea3i<\/h2>\n\n\n\n

S\u1ef1 xu\u1ea5t hi\u1ec7n c\u1ee7a Mythos Preview \u0111\u1eb7t ra m\u1ed9t ngh\u1ecbch l\u00fd quen thu\u1ed9c trong ng\u00e0nh b\u1ea3o m\u1eadt, nh\u01b0ng \u1edf quy m\u00f4 ch\u01b0a t\u1eebng th\u1ea5y: c\u00f9ng m\u1ed9t c\u00f4ng c\u1ee5 c\u00f3 th\u1ec3 ph\u1ee5c v\u1ee5 c\u1ea3 ng\u01b0\u1eddi ph\u00f2ng th\u1ee7 l\u1eabn k\u1ebb t\u1ea5n c\u00f4ng. Anthropic \u0111\u00e3 quy\u1ebft \u0111\u1ecbnh kh\u00f4ng ph\u00e1t h\u00e0nh m\u00f4 h\u00ecnh ra c\u00f4ng ch\u00fang, nh\u01b0ng th\u1eeba nh\u1eadn r\u1eb1ng c\u00e1c m\u00f4 h\u00ecnh m\u1ea1nh t\u01b0\u01a1ng t\u1ef1 ch\u1eafc ch\u1eafn s\u1ebd xu\u1ea5t hi\u1ec7n t\u1eeb c\u00e1c c\u00f4ng ty kh\u00e1c trong th\u1eddi gian kh\u00f4ng xa.<\/p>\n\n\n\n

“N\u1ebfu l\u00e0m kh\u00f4ng c\u1ea9n th\u1eadn, \u0111\u00e2y c\u00f3 th\u1ec3 l\u00e0 ch\u1ea5t x\u00fac t\u00e1c \u0111\u00e1ng k\u1ec3 cho k\u1ebb t\u1ea5n c\u00f4ng”, Graham c\u1ea3nh b\u00e1o. Ch\u00ednh v\u00ec v\u1eady, to\u00e0n b\u1ed9 c\u1ea5u tr\u00fac c\u1ee7a Project Glasswing \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng theo m\u00f4 h\u00ecnh ti\u1ebft l\u1ed9 l\u1ed7 h\u1ed5ng c\u00f3 ph\u1ed1i h\u1ee3p, cho ph\u00e9p b\u00ean ph\u00f2ng th\u1ee7 c\u00f3 th\u1eddi gian v\u00e1 l\u1ed7i tr\u01b0\u1edbc khi th\u00f4ng tin \u0111\u01b0\u1ee3c c\u00f4ng khai.<\/p>\n\n\n\n

Anthropic cho bi\u1ebft m\u1ee5c ti\u00eau cu\u1ed1i c\u00f9ng l\u00e0 ph\u00e1t tri\u1ec3n c\u00e1c ph\u01b0\u01a1ng ph\u00e1p \u0111\u1ec3 tri\u1ec3n khai m\u00f4 h\u00ecnh Mythos-class an to\u00e0n \u1edf quy m\u00f4 r\u1ed9ng h\u01a1n, nh\u01b0ng ch\u01b0a c\u00f3 l\u1ed9 tr\u00ecnh c\u1ee5 th\u1ec3. \u0110i\u1ec1u c\u1ea5p b\u00e1ch nh\u1ea5t l\u00fac n\u00e0y, theo Graham, l\u00e0 c\u00e1c t\u1ed5 ch\u1ee9c trong li\u00ean minh ph\u1ea3i x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c nh\u1eefng c\u00e2u h\u1ecfi c\u1ea7n tr\u1ea3 l\u1eddi, r\u1ed3i m\u1edbi t\u00ecm c\u00e2u tr\u1ea3 l\u1eddi. “Project Glasswing ch\u1ec9 l\u00e0 \u0111i\u1ec3m kh\u1edfi \u0111\u1ea7u. N\u00f3 s\u1ebd th\u1ea5t b\u1ea1i n\u1ebfu ch\u1ec9 l\u00e0 m\u1ed9t nh\u00f3m nh\u1ecf c\u00f4ng ty d\u00f9ng m\u1ed9t m\u00f4 h\u00ecnh. N\u00f3 ph\u1ea3i ph\u00e1t tri\u1ec3n th\u00e0nh th\u1ee9 g\u00ec \u0111\u00f3 l\u1edbn h\u01a1n nhi\u1ec1u.”<\/p>\n\n\n

 <\/p>\n\n\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb: Wired, Anthropic Red Team Blog, The Verge<\/em><\/p>","protected":false},"excerpt":{"rendered":"

Anthropic c\u00f4ng b\u1ed1 Claude Mythos Preview, m\u00f4 h\u00ecnh AI c\u00f3 th\u1ec3 t\u1ef1 t\u00ecm v\u00e0 khai th\u00e1c l\u1ed7 h\u1ed5ng zero-day trong m\u1ecdi h\u1ec7 \u0111i\u1ec1u h\u00e0nh l\u1edbn. Project Glasswing t\u1eadp h\u1ee3p h\u01a1n 45 t\u1ed5 ch\u1ee9c, trong \u0111\u00f3 c\u00f3 Microsoft, Apple v\u00e0 Google, \u0111\u1ec3 chu\u1ea9n b\u1ecb ph\u00f2ng th\u1ee7 tr\u01b0\u1edbc khi c\u00f4ng ngh\u1ec7 n\u00e0y tr\u1edf n\u00ean ph\u1ed5 bi\u1ebfn.<\/p>","protected":false},"author":2,"featured_media":1043,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[77,92,79,91,93],"class_list":["post-1044","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-anthropic","tag-bao-mat-ai","tag-claude-mythos","tag-project-glasswing","tag-zero-day"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1044","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1044"}],"version-history":[{"count":2,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1044\/revisions"}],"predecessor-version":[{"id":1072,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1044\/revisions\/1072"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1043"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1044"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1044"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}