InfoSecBulletin Cybersecurity for mankind
Anthropic has shown the amazing first results of Project Glasswing. This is a teamwork project for cybersecurity. It aims to protect important systems with smart AI before bad actors can take advantage.
In the first month, the project used the new Claude Mythos model to find over 10,000 serious zero-day flaws in important software systems worldwide.
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
Anthropic worked with more than 50 big tech companies like Microsoft, Apple, Google, and Cloudflare to use Claude Mythos Preview on specific codebases. The model has shown an amazing skill to find problems and create working exploits by itself.
Cloudflare found 2,000 bugs, with 400 being high or critical. They noted that the model is better at spotting issues than human security testers.
Claude Mythos Preview Uncovers 10,000+ 0-Days
Independent checks show these skills work well in various settings. The UK’s AI Security Institute found that Mythos Preview is the first model to completely handle its complex cyberattack tests. Meanwhile, Mozilla used the model to find and fix 271 weaknesses in Firefox 150, finding ten times more issues than earlier tests with Claude Opus 4.6.
The large number of discoveries has shown a big problem in the software industry: people can’t quickly find, report, and fix security issues as fast as AI can discover them.
The first scan found 23,019 possible issues. When 1,900 of these were checked by outside security companies, 1,726 (90.8%) were confirmed as real problems.
Anthropic found 1,596 issues and told the maintainers, but only 97 problems were fixed so far. This led to just 88 security warnings being issued. This big drop shows how much work the volunteer open-source maintainers have. They are now overwhelmed with many serious AI issues.
Organizations are encouraged to go beyond just patching. They should improve their network security by using strict default settings, requiring multi-factor authentication, and using advanced behavior analysis to shorten the time to detect problems after a breach.
According to the initial results report, Anthropic is thinking about releasing Mythos-class models in the future.
