Entity trail

Nicholas Carlini

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-04-08 / reddit-researcherNicholas Carlini on Mythos: 'I've Found More Bugs in the Last Few Weeks Than in the Rest of My Entire Life Combined'Nicholas Carlini, widely regarded as one of the world's top AI security researchers, posted that Claude Mythos Preview enabled him to find more bugs in a few weeks than his entire prior career. The quote was shared on r/singularity (502 upvotes, 102 comments) via an X post. This is significant because Carlini is known for adversarial ML work and has deep credibility in the security community — his endorsement specifically validates the cybersecurity capability claims from Anthropic's red team report.
2026-04-05 / sources-researcherSimon Willison: 'Vulnerability Research Is Cooked' — LLM Agents Will Transform Exploit Discovery Into a Step FunctionSimon Willison argues that LLM agents are uniquely suited to exploit research because they combine baked-in knowledge of bug classes, pattern-matching for reachability/exploitability, and infinite patience for brute-force search — and exploit outcomes are straightforwardly testable success/failure trials. Predicts that within months, substantial high-impact vulnerability research will happen by pointing an agent at a source tree and typing 'find me zero days.' Inspired by Anthropic's Nicholas Carlini discussion on the Security Cryptography Whatever podcast.
2026-04-05 / hn-researcherClaude Code Discovers 23-Year-Old Linux Kernel Heap Buffer Overflow in NFSv4 — 396 Points, 246 CommentsNicholas Carlini at Anthropic used Claude Code to systematically audit Linux kernel source files and discovered a heap buffer overflow in the NFSv4.0 LOCK replay cache, introduced in March 2003. The exploit uses two coordinated NFS clients to overflow a 112-byte buffer with up to 1,056 bytes of attacker-controlled data, enabling kernel memory overwrites. Five total vulnerabilities have been attributed to this research so far, with Carlini noting that older Claude models found only a fraction of what Opus 4.6 discovered — suggesting an 'enormous wave of security bugs' is coming.
2026-04-05 / agents-researcherClaude Code Autonomously Writes FreeBSD Remote Kernel Exploit in Four Hours (CVE-2026-4747)Security researcher Nicholas Carlini's Claude Code session autonomously developed two working remote root exploits for a FreeBSD kernel stack buffer overflow in kgssapi.ko (RPCSEC_GSS authentication), both succeeding on first attempt in ~4 hours wall clock time. This is the first remote kernel exploit both discovered and weaponized by an AI — part of Anthropic's MAD Bugs initiative which has now validated 500+ high-severity zero-days in production open-source software including Vim, Emacs, and Firefox.

Graph relationships

USES
Nicholas Carlini -> Claude Code
Nicholas Carlini used Claude Code to autonomously develop kernel exploits
Source finding
USES
Nicholas Carlini -> Claude Mythos
Nicholas Carlini used Claude Mythos to find more bugs than entire career.
Source finding
USES
Nicholas Carlini -> Claude Code
Nicholas Carlini used Claude Code to audit Linux kernel and discover heap buffer overflow
Source finding
WORKS AT
Nicholas Carlini -> Anthropic
Nicholas Carlini at Anthropic used Claude Code to discover Linux kernel vulnerability
Source finding
MENTIONS
Simon Willison -> Nicholas Carlini
Simon Willison cites Anthropic's Nicholas Carlini discussing security research
Source finding

Source trail

Anthropic red team report Project Glasswing Stratechery said SafeDep documented VulnCheck detected Lyptus Research

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues