Project Glasswing: An initial update

Anthropic’s Project Glasswing used the Claude Mythos Preview model to scan thousands of critical and open-source software projects, reporting discovery of more than ten thousand vulnerabilities (including ~6,202 high- or critical-severity in open-source scans). The report highlights high true-positive rates in independent triage, a demonstrated ability to construct exploits (example: a now-patched wolfSSL vulnerability, CVE-2026-5194), and describes the major operational bottleneck: human capacity to verify, disclose, and patch the rapidly growing volume of findings. It also outlines defensive recommendations, tooling (Claude Security, Cyber Verification Program), and partnerships to help maintainers and defenders cope with the accelerated discovery and exploitation risk.