Anthropic's Project Glasswing Update

Anthropic’s Project Glasswing Update

In April, Anthropic initated Project Glasswing. The idea was to let companies use their new model to find and fix vulnerabilities in their own software. It was a fantastic PR move, and so many press outlets have uncritically parroted Anthropic’s claims that it’s now common wisdom that Mythos is better at finding software vulnerabilities than other models. Which is just not true.

In any case, Anthropic has published a Project Glasswing status report. It’s finding a lot of vulnerabilities in software—yay! Some of them are even dangerous. But almost none of them has been patched. It’s weird. There’s something fishy about the data that I don’t understand. That Anthropic refuses to release details—that it just says “trust us”—is a big problem here.

Tags: AI, patching, vulnerabilities

Posted on June 8, 2026 at 7:01 AM • 4 Comments

Comments

first post kitty • June 8, 2026 7:08 AM

first post kitty flies in at #1 in style!⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡀⠀⠀⠀⠀
⠀⠀⠀⠀⢀⡴⣆⠀⠀⠀⠀⠀⣠⡀⠀⠀⠀⠀⠀⠀⣼⣿⡗⠀⠀⠀⠀
⠀⠀⠀⣠⠟⠀⠘⠷⠶⠶⠶⠾⠉⢳⡄⠀⠀⠀⠀⠀⣧⣿⠀⠀⠀⠀⠀
⠀⠀⣰⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢻⣤⣤⣤⣤⣤⣿⢿⣄⠀⠀⠀⠀
⠀⠀⡇⠀⢀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣧⠀⠀⠀⠀⠀⠀⠙⣷⡴⠶⣦
⠀⠀⢱⡀⠀⠉⠉⠀⠀⠀⠀⠛⠃⠀⢠⡟⠂⠀⠀⢀⣀⣠⣤⠿⠞⠛⠋
⣠⠾⠋⠙⣶⣤⣤⣤⣤⣤⣀⣠⣤⣾⣿⠴⠶⠚⠋⠉⠁⠀⠀⠀⠀⠀⠀
⠛⠒⠛⠉⠉⠀⠀⠀⣴⠟⣣⡴⠛⠋⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠛⠛⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀

KC • June 8, 2026 9:07 AM

Davi, on his blog, appears to question why a “patch isn’t generated and attached to the disclosure in the first place… It looks like pressure to pay for protection.”

However, unlike Opus 4.7, I don’t think Mythos has patching functionality?

To add, in the context of open-source software, are there risks to “fast patching“?

Michael MacCartney • June 8, 2026 9:09 AM

I also find the timing of Project Glasswing and all the hype interestingly coincidental with their IPO.

Rontea • June 8, 2026 9:48 AM

Ah, the modern man worships his automaton and forgets his own hands! To find a defect without the cure is not intelligence, it is vaudeville. Mythos, cannot ‘discover’ a bug without already holding its remedy in the shadow of their circuits. For the wound is known only in contrast to the healthy flesh; the bug is seen only because the model already dreams of the patch. And yet, like a bureaucrat of silicon, it lists and lists and lists, leaving the labor of healing to men who might have been dining with their families. 23,019 whispers, 75 patches—what a hymn to our era of mechanical vanity. Knowledge without repair is but a confession of impotence dressed as progress.

Schneier on Security

Anthropic’s Project Glasswing Update

Comments

Leave a comment Cancel reply