Project Glasswing: ~50 partners found 10,000+ high-severity bugs in a month with Claude Mythos Preview
Anthropic published the first results from Project Glasswing, its restricted-access program that puts Claude Mythos Preview in the hands of roughly 50 critical-infrastructure and software partners.
Collectively they found more than ten thousand high- or critical-severity vulnerabilities in the first month. Cloudflare alone found 2,000 bugs, 400 of them rated high or critical, with a false-positive rate its team considers better than human testers; Mozilla found and fixed 271 vulnerabilities in Firefox 150 versus roughly a tenth as many in Firefox 148 with Claude Opus 4.6. Anthropic says it also scanned 1,000+ open-source projects, and 90.6% of the 1,752 findings independently triaged so far proved to be true positives. Mythos-class models remain unreleased.

WHY IT MATTERS
The clearest public data yet that frontier cyber capability has flipped from can models find bugs to can humans triage the flood — open-source maintainers told Anthropic they are capacity-constrained, and some asked the lab to slow its disclosures.
