Project Glasswing has uncovered 10,000 vulnerabilities: Anthropic

Anthropic's Project Glasswing, powered by Claude Mythos Preview, has uncovered an estimated 10,000 critical or high-severity vulnerabilities across 1,000+ open-source projects in just a few months. Of 1,752 independently reviewed findings, 90.6% were confirmed valid and 62.4% rated high or critical severity. The initiative highlights a growing asymmetry: AI dramatically lowers the cost of finding vulnerabilities while patching remains slow and human-bound. Open-source maintainers are overwhelmed by the volume of disclosures, with some asking Anthropic to slow down. Security analysts note the bottleneck has shifted from discovery to remediation, and organizations still on quarterly patch cycles face materially higher risk. Questions remain about compute costs and the true positive rate across all findings.