Project Glasswing Update: The Bottleneck Is Moving From Discovery to Patching
Last month, I wrote that Project Glasswing mattered less as a model announcement and more as a deployment signal . Anthropic had a frontier model with unusually strong cyber capability, and instead of shipping it broadly, it wrapped it in a controlled defensive program. The new initial update for Project Glasswing makes that decision easier to understand. It does not prove vulnerability research is a solved problem. But it does show something important: AI-assisted vulnerability discovery is scaling faster than the human systems that verify, disclose, patch, and deploy fixes. What Changed In The First Month? Anthropic says its approximately 50 partners have already found more than 10,000 high- or critical-severity vulnerabilities across systemically important software. The public examples are notable: Cloudflare says Mythos Preview helped it find 2,000 bugs , including 400 high- or critical-severity issues, with a false positive rate its team consid...