Anthropic says its Project Glasswing, a restricted initiative using the Claude Mythos model, has identified more than 10,000 candidate vulnerabilities with high or critical severity since the program launched about a month ago. Multiple outlets report that Anthropic has validated a smaller subset as true positives, with roughly 1,700 confirmed overall and about 1,000 rated high or critical. The findings involve software described as systemically important and are produced with help from a limited set of partners.
Several reports also describe a broader set of results for early Mythos Preview activity, including totals that reach 23,000 potential vulnerabilities across a large number of open-source projects, with thousands more severe issues expected to be confirmed as reviews continue. Sources note that some confirmed issues have been sent to vendors, and a smaller number of fixes have been published through patching and public security advisories. The reporting highlights a perceived gap between rapid vulnerability discovery and slower patching and disclosure processes, including factors such as coordinated vulnerability disclosure timelines and cases where fixes may not yet have public advisories.
Anthropic continues to review findings while partners work through remediation and disclosure.