{"id":8260,"date":"2026-05-26T01:51:43","date_gmt":"2026-05-26T01:51:43","guid":{"rendered":"https:\/\/cybersecurityinfocus.com\/?p=8260"},"modified":"2026-05-26T01:51:43","modified_gmt":"2026-05-26T01:51:43","slug":"project-glasswing-has-uncovered-10000-vulnerabilities-anthropic","status":"publish","type":"post","link":"https:\/\/cybersecurityinfocus.com\/?p=8260","title":{"rendered":"Project Glasswing has uncovered 10,000 vulnerabilities: Anthropic"},"content":{"rendered":"
\n
\n
\n
\n
<\/div>\n

Anthropic says it and upwards of 50 partners involved in Project Glasswing<\/a> have uncovered an estimated 10,000 critical or high-severity vulnerabilities in their software offerings.<\/p>\n

The company launched the cybersecurity initiative, which is built around Claude Mythos Preview<\/a>, in April, stating that its launch partners would use it as part of their defensive security work.<\/p>\n

Anthropic said it created<\/a> Project Glasswing when capabilities in its new frontier model \u201crevealed a stark fact: AI models have reached a level of coding capability where they can surpass all but the most skilled humans at finding and exploiting software vulnerabilities.\u201d At the time, it also indicated that it was committing upwards of $100 million in usage credits, as well as an additional $4 million in donations to open source security organizations.<\/p>\n

In an update<\/a> published late last week, Anthropic stated, \u201cfor the last few months we have used Mythos Preview to scan more than 1,000 open-source projects, which collectively underpin much of the internet \u2014 and much of our own infrastructure.\u201d<\/p>\n

During that process, Mythos Preview found 6,202 high or critical severity vulnerabilities in these projects, 1,752 of which have since been assessed by six independent security research firms.<\/p>\n

Maintainers facing bug report deluge<\/h2>\n

Of these, Anthropic stated, 90.6% (1,587) \u201chave proved to be valid true positives, and 62.4% (1,094) were confirmed as either high or critical severity. That means that even if Mythos Preview finds no further vulnerabilities, at our current post-triage true-positive rates, it\u2019s on track to have surfaced nearly 3,900 high or critical severity vulnerabilities in open source code \u2014 in addition to those it has found for Project Glasswing\u2019s partners.\u201d<\/p>\n

Authors of the report noted that, on top of the regular challenges of maintaining open-source software, \u201cmaintainers have been facing a deluge of low-quality, AI-generated bug reports. Indeed, several maintainers have told us they\u2019re currently severely capacity constrained, and some have even asked us to slow down our rate of our disclosures because they need more time to design patches.\u201d<\/p>\n

Anthropic estimated that it has disclosed 530 high or critical severity bugs to maintainers so far, and is aiming to disclose another 827. Of those 530 bugs, 75 have been patched, and there have been 65 public advisories. The company said that the relatively low number is due to three factors: first, the 90 day window set out in its coordinated vulnerability disclosure policy has not closed, second, it is probably undercounting because some flaws have been patched without disclosure, and finally, the security ecosystem is already overloaded.<\/p>\n

\u201cThe relative ease of finding vulnerabilities compared with the difficulty of fixing them amounts to a major challenge for cybersecurity,\u201d the report\u2019s authors noted.<\/p>\n

Nonetheless, Glasswing\u2019s success so far has led the company to release Claude Security<\/a> in beta for its enterprise customers, and it has begun its Cyber Verification Program<\/a> to allow legitimate security pros to use its models in their work without certain of its safeguards.<\/p>\n

Mark Tauschek<\/a>, distinguished analyst at Info-Tech Research Group, said Anthropic\u2019s decision to keep access to Claude Mythos Preview restricted through Project Glasswing is one of the clearest signals yet that frontier AI capabilities have crossed a real threshold in cybersecurity.<\/p>\n

The company, he said, \u201cdeserves some credit for the transparency of its system card and the structure of Project Glasswing. But being transparent about the problem is not the same thing as solving it.\u201d<\/p>\n

According to Tauschek, \u201cthe update validates the practical reality that IT and security leaders now have to deal with the fact that the cost of discovering software vulnerabilities has dropped dramatically. If a single AI model can surface thousands of serious vulnerabilities across foundational software in a matter of weeks, the window between vulnerability discovery and exploitation will keep compressing.\u201d<\/p>\n

Organizations still treating patching as a quarterly exercise are operating with materially more risk than they were even a short time ago, he added.<\/p>\n

Tauschek said that the fact that some maintainers have asked Anthropic to slow down should not be seen as resistance to better security. \u201cRather, it points to a capacity problem that has been building for years,\u201d he said. \u201cMany of the open-source projects enterprises rely on are maintained by small teams or volunteers, often people with day jobs.\u201d<\/p>\n

A key bottleneck has moved<\/h2>\n

Meanwhile, he said, the \u201corganizations depending on that code operate at a massive scale. AI can accelerate discovery, but it does not create the human capacity required to validate findings, design safe patches, test them, and get them deployed. This also forces a rethink of defense-in-depth.\u201d<\/p>\n

Kellman Meghu<\/a>, CTO of DeepCove Cybersecurity, added that nothing in the Project Glasswing update is surprising to him. \u201cOur company had figured out almost two years ago that, in the hands of a competent researcher, the ability [of AI] to find vulnerabilities and exploit them were greatly accelerated,\u201d he noted. \u201cI think the change now is that the barrier of entry to drive the prompts in a large language model has dropped significantly. This will only get better, and is our new reality.\u201d<\/p>\n

DeepCove, he said, \u201chas had to accelerate its patching and controls assessment, which now includes leveraging large language models to help identify and patch or build compensating controls for our services and our customer infrastructures.\u201d<\/p>\n

According to Meghu, \u201cfinding bugs is now cheap, but patching them is still slow and human-bound in many cases. Clients have change management processes, regulatory testing windows, and\u00a0change\u00a0blackouts that make absorbing this pace genuinely hard.\u201d<\/p>\n

What Anthropic\u2019s update really shows, he pointed out, \u201cis that the bottleneck in cybersecurity has moved from finding vulnerabilities to absorbing patches and adapting client defenses fast enough to keep up.\u201d<\/p>\n

His take echoes that of Anthropic, which noted, \u201cthe bottleneck in fixing<\/em> bugs like these is the human capacity to triage, report, and design and deploy patches for them.\u201d<\/p>\n

The operational pressure of the new patch cadence is \u201cas immediate as the offensive threat,\u201d Meghu said. \u201cWe\u2019ve responded by building AI-assisted auditing into our own development pipeline and tightening client patch SLAs on critical dependencies. But this is not an easy process to manage. We do not blindly trust LLMs or agents to operate\u00a0autonomously,\u00a0and this has resulted in significant change in\u00a0operator\u00a0assisted processes for LLM integration.\u201d<\/p>\n

As well, noted David Shipley<\/a>, CEO of Beauceron Security, \u201cthe headline grabber that everyone\u2019s been paying attention to is the 10,000 potential vulnerabilities it found, and then, of those, 6,000 being critical, but when you actually pare the numbers down, you get closer to 1,500 that are actually human verified, legitimate, and so that\u2019s quite a fall off.\u201d<\/p>\n

\u201c[Anthropic also stated that] 90% of the 1,752 higher critical rated vulnerabilities that have been humanly reviewed were found to be accurate,\u201d he said. \u201cCool, but that means it\u2019s still about 15% of the total number that it found.\u201d<\/p>\n

According to Shipley, a critical question that has yet to be unanswered is the cost of finding each one of\u00a0these vulnerabilities. \u201cHow many tokens are you burning? I\u2019ve heard it\u2019s in the range of $500 a minute, so I\u2019m really curious to know what the cost is,\u201d he said. \u201cSurely, if they can tell us how \u2018we found this many\u2019, [they can answer] how much compute did it cost?\u201d<\/p>\n

He added that the only ultimate fix is to \u201cmake software makers liable for their software. That is the only way out of this mess, because that is the fundamental misalignment that got us here.\u201d<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"

Anthropic says it and upwards of 50 partners involved in Project Glasswing have uncovered an estimated 10,000 critical or high-severity vulnerabilities in their software offerings. The company launched the cybersecurity initiative, which is built around Claude Mythos Preview, in April, stating that its launch partners would use it as part of their defensive security work. […]<\/p>\n","protected":false},"author":0,"featured_media":8261,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-8260","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-education"],"_links":{"self":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/8260"}],"collection":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8260"}],"version-history":[{"count":0,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/8260\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/media\/8261"}],"wp:attachment":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8260"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8260"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8260"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}