đ° Full Story
Anthropic said Project Glasswing, a restricted cybersecurity initiative powered by its unreleased Claude Mythos Preview model, has surfaced more than 10,000 high- or critical-severity vulnerability candidates in roughly a month of scanning.
Of those, 1,726 have been validated as true positives and 1,094 confirmed as high- or critical-severity.
Mythos flagged 6,202 high- or critical-severity candidates across more than 1,000 open-source projects; only 97 fixes have been merged upstream and 88 advisories published so far.
Notable findings include a CVE-2026-5194 flaw in WolfSSL (CVSS 9.1) that could allow certificate forgery, and a separate use case in which a Glasswing partner bank says the model helped stop a $1.5 million fraudulent wire transfer.
Access to the model is limited to about 50 vetted partners including major cloud and security firms; Anthropic has also launched a Cyber Verification Program for vetted defenders.
The company and partners are urging developers to shorten patch cycles as vendors such as Microsoft and Oracle adjust release cadences.
Anthropic says it is keeping Mythos-class models closed to the public until stronger safeguards are in place.
đ Based On
đ¤ Social Media Insights
Social Summary
AI-scale scanning can surface many candidate flaws quickly, but experts warn quantity does not equal real-world exploitability. The near-term operational problem is triage and patch absorption; without published PoCs and better prioritization, the headline figures risk overstating immediate danger.
đ°ď¸ The Story So Far: An Evolving Timeline
Saturday, May 23, 2026 15:34 UTC
Anthropic's Project Glasswing Finds 10,000 Flaws
Thursday, May 21, 2026 04:45 UTC
Anthropic speeds development and revamps agent billing






đŹ Commentary