Wasn't it already confirmed that small open-weight models were able to detect most of the same headline vulns as mythos? How is this any different?
Do you have a source for this? Not doubting it, but I would like to have something concrete the next time the Mythos horse manure is cited.
No, they are able to detect errors when pointed at them but they have a lot of false positives... making them functionally useless for a large unknown codebase. They also can't build and run an exploit post-identification. Mythos can find vulnerabilities (purportedly) and actually validate them by building and running exploits. This makes it functional and usable for hacking.