Anthropic expands Project Glasswing cybersecurity program to 150 more organizations

Source Domain: siliconangle.com

Anthropic PBC is expanding a program that enables organizations to test their cybersecurity defenses using its Claude Mythos Preview model.

The initiative, which is known as Project Glasswing, launched earlier this year with about 50 participants. The group included Microsoft, Nvidia Corp., Google LLC and prominent tech firms. Anthropic announced today that it has opened access to 150 more organizations.

The company says that the newly added participants include enterprises in the power, water, healthcare and communications sectors. The Financial Times reported that NATO and the European Union’s ENISA cybersecurity agency also received access.

Anthropic is limiting Claude Mythos Preview’s availability over concerns that it could be misused by hackers. However, some industry observers argue that the model’s phased rollout doesn’t fully mitigate cybersecurity risks.

“Controlled rollout of frontier AI is the right instinct. But opacity is not a security strategy,” said Justin Beals, the founder and Chief Executive Officer of venture-backed cybersecurity startup Strike Graph Inc. “As these tools become more capable, the organizations cleared to use them become high-value targets. Access without continuous compliance validation is just a slower version of the same risk. Whoever gets access, the standard should be verifiable transparency, not curated receipts.”

One of the reasons behind Anthropic’s cautious approach is that Claude Mythos Preview can not only spot software vulnerabilities but also find ways to exploit them. In some cases, it can chain together multiple vulnerabilities. Commercially available large language models struggle with that task.

Last month, Anthropic disclosed that Project Glasswing participants had found more than 23,000 vulnerabilities. Claude Mythos Preview rated more than a quarter of those flaws as high-severity or critical. Anthropic manually analyzed 1,752 of the flaws that receive those destinations and…

Source