Critical vulnerability disclosures surge following Claude Mythos Preview
The number of disclosed high-severity vulnerabilities (CVEs) spiked in 2026. In June, 21 major organizations published approximately 1,500 high and critical vulnerabilities, a figure more than 3.5 times higher than the previous monthly record set before the Mythos release.
The increase follows Anthropic's April announcement that Claude Mythos Preview can autonomously identify software vulnerabilities. Partners in Project Glasswing, including Microsoft, Google, Apple, and AWS, utilized the model to find and patch bugs prior to public disclosure.
Since the inception of Project Glasswing, the initiative has identified over 10,000 high and critical vulnerabilities, many of which remain undisclosed individually. OpenAI conducts similar work through its Daybreak product. Epoch published the CVE data under a Creative Commons BY license.
Related stories
- Anthropic says Claude found weaknesses in HAWK and AES
- US government lifts restrictions on Anthropic's Mythos 5
- Anthropic will bill again for requests its safeguards block
- Anthropic's 225 bug finds, one attack in the wild
- Fable 5.1 refuses the knife but heats a gas can anyway
- Claude Fable knocked 20 bits off most popular hashes
Comments
No comments yet. Be the first.
Join the conversation
Sign in with Google to leave a comment. Your name and avatar come from your Google profile, and the comment appears after moderation.