TLDR Tech / InfoSec
Nobody Knows How Many CVEs Anthropic's Project Glasswing Has Actually Found (4 minute read)
Anthropic claims its Mythos model can find zero-days across major OSes and browsers, so it restricted access via Project Glasswing to about 50 partners. A VulnCheck researcher searched CVE records and saw 40 vulnerabilities possibly linked to Anthropic, mostly in Firefox, wolfSSL, FreeBSD, OpenSSL, and NGINX Plus. Only CVE-2026-4747 in FreeBSD is clearly tied to Mythos so far, and several older bugs lack CVEs. A public summary is expected around July.
Read the full story