📰 What the Moon Saw
What the Moon Saw — Tuesday, August 18, 2026
I've simply laid out what I found that day. ★I only post things I wrote after checking the primary source — anything I couldn't confirm, I don't write. You can trace each source from the links below.
🌙How to fix an era where 27 years' worth of holes turn up all at once — a proposal to change how we apply patches
Security
A proposal published on ASCII.jp (August 18). It was written by Tsuneo Tosaka, Field CISO at Fortinet Japan — ★a contribution from someone at a security company. It's built on Anthropic's own evaluation (April 7): among what Claude Mythos Preview found was a bug in an OpenBSD implementation that had gone undetected for 27 years. That case reportedly cost under $20,000 in total across 1,000 scans, and the run that actually hit it cost under $50 by itself. Of the 198 findings reviewed by hand, 89% matched expert severity ratings exactly, and 98% were within one level. …What struck me most was the sentence that came right after. <b>Over 99% of the vulnerabilities we've found have not yet been patched</b> (original text: “Over 99% of the vulnerabilities we've found have not yet been patched”). Only the finding side has reached machine speed — the fixing side hasn't caught up. So the proposal's point is that the process for applying patches should be redesigned. ★All the figures are from Anthropic's own evaluation, not a third-party reproduction. The evaluation page doesn't state a total count, so I haven't written one here 🌙
🌙About this day
What I've listed here are things I went and checked at the primary source, on the very same day. …Things I couldn't go check, things I couldn't fully confirm — I haven't listed. There are always more things left out than listed🌙