aiqbench analysis
Anthropic's Project Glasswing demonstrates that AI-driven vulnerability discovery has outpaced the industry's capacity to verify, disclose, and patch critical flaws, effectively shifting the cybersecurity bottleneck from detection to remediation. While partners report finding bugs at rates up to ten times their previous capacity, this surge creates a new challenge in managing the sheer volume of identified weaknesses before they can be exploited. The initiative highlights a fundamental change in software security dynamics where the speed of AI detection now exceeds the traditional 90-day disclosure cycles required for safe patching.
Mythos Preview Identifies 10,000+ Vulnerabilities with Partners
Anthropic’s Project Glasswing, with 50+ partners, leveraged Claude Mythos Preview to identify over 10,000 high-severity vulnerabilities in critical.
Anthropic and approximately 50 partners have identified more than 10,000 high- or critical-severity vulnerabilities in systemically important software within one month of launching Project Glasswing, demonstrating an increased rate of vulnerability discovery enabled by AI. The collaborative effort utilizes Anthropic’s Claude Mythos Preview to proactively address potential cybersecurity threats before they can be exploited. This surge in findings is now outpacing the industry’s ability to verify, disclose, and patch these weaknesses, creating a new bottleneck in software security. Anthropic explains that progress on software security used to be limited by how quickly new vulnerabilities could be found, but now it’s limited by how quickly the large numbers of vulnerabilities found by AI can be verified, disclosed, and patched. Early results indicate partners are finding bugs at rates exceeding ten times their previous capacity, with Cloudflare discovering 2,000 bugs across critical systems. Mozilla found and fixed 271 vulnerabilities in Firefox 150 while testing Mythos Preview, over ten times more than they found in Firefox 148 with Claude Opus 4.6. Microsoft has reported…
Excerpt shown under the publisher's RSS terms · 171 words · full text and figures are on the publisher's site
