Project Glasswing report: vulnerabilities found, but not fixed

Anthropic published a status update on Project Glasswing, where Claude Mythos searches for software vulnerabilities. According to the company, the AI found thousands of flaws, including critical threats in infrastructure systems previously reported.

Despite the volume of findings, nearly none of the discovered vulnerabilities have been patched by software developers. The lack of public technical details and process information raises questions among security experts. Anthropic cites the need for trust in model results, without disclosing specific data.

The project currently covers 150 organizations across 15 countries. The absence of patches, given the high detection rate, remains the main unresolved aspect of the initiative.