Hacktron benchmark: small LLMs run repeatedly beat frontier models on cost-to-recall for oauth2-proxy auth bypass 0-days
Hacktron published a vendor blog post arguing that frontier models such as Anthropic's Mythos are unnecessary for most vulnerability discovery work. To support this, it benchmarked its scanning pipeline across several LLMs against two zero-day authentication bypasses it found in oauth2-proxy v7.15.0: CVE-2026-34457 and CVE-2026-40575. Its…