{"id":253985,"date":"2026-05-24T07:02:00","date_gmt":"2026-05-24T11:02:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/24\/project-glasswing-by-antropic-didnt-just-find-the-bugs-it-also-found-the-real-vulne\/"},"modified":"2026-05-24T07:15:10","modified_gmt":"2026-05-24T11:15:10","slug":"project-glasswing-by-antropic-didnt-just-find-the-bugs-it-also-found-the-real-vulne","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/24\/project-glasswing-by-antropic-didnt-just-find-the-bugs-it-also-found-the-real-vulne\/","title":{"rendered":"Project Glasswing by Antropic didn’t just find the bugs. It also found the real vulne"},"content":{"rendered":"

Project Glasswing by Antropic didn’t just find the bugs. It also found the real vulne<\/a><\/p>\n

https:\/\/www.calcalistech.com\/ctechnews\/article\/bjs11f8xlgx<\/a><\/p>\n

Publish Date: 2026-05-24 07:02:00<\/a><\/p>\n

Source Domain: www.calcalistech.com<\/a><\/p>\n

In one month, Claude Mythos found over 10,000 critical vulnerabilities across the world’s most important software. Mozilla found 271 vulnerabilities in Firefox – ten times more than with the previous model. Cloudflare – 2,000 flaws, 400 of them critical, with a lower false positive rate than human testers. Palo Alto released five times its usual volume of security patches. wolfSSL, a cryptography library running on billions of devices, contained a flaw that would have let attackers forge certificates for any bank or email provider – completely invisible to an end user. AI caught it before the attackers did.<\/span><\/span><\/p>\n

But that’s not the story.<\/span><\/span><\/p>\n

The story is that out of 6,200 critical vulnerabilities found in open-source software alone, only 75 have been patched. Some open-source maintainers even actually asked Anthropic to slow down its disclosures. Anthropic’s own words from this week’s update: “even at our relatively slow pace of disclosures, Mythos Preview is adding to an already-overloaded security ecosystem”.<\/span><\/span><\/p>\n

1<\/span> View gallery <\/p>\n

\"Tal<\/span><\/p>\n

Alon Cinamon. <\/span><\/p>\n

(Yoni Reif<\/span>)<\/p>\n

The assumption that broke – and the system built around it<\/span><\/span><\/p>\n

For thirty years, cybersecurity was built on one foundational assumption: finding vulnerabilities is the hard part. Slow, expensive, requiring rare expertise. So every system downstream was calibrated for that pace – the 90-day disclosure windows, the coordinated vulnerability programs, the patch release cycles, the manual triage processes, the open-source maintainer model running on volunteer capacity with no security budget and no SLA.<\/span><\/span><\/p>\n

Those systems are broken by design – built around a constraint that no longer exists. When you remove the bottleneck of finding vulnerabilities without redesigning what comes after it, you get a flood hitting a wall and not a faster pipeline.<\/span><\/span><\/p>\n

As Anthropic noted this week: there is currently a long lag between discovery, patch creation, and deployment at scale. Mythos-class models shrink the time and cost required to find and exploit…<\/span><\/span><\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Project Glasswing by Antropic didn’t just find the bugs. It also found the real vulne…<\/p>\n","protected":false},"author":1,"featured_media":253986,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/pic1.calcalist.co.il\/picserver3\/crop_images\/2025\/09\/17\/ryevOot00sxg\/ryevOot00sxg_0_354_1158_652_0_large.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[20,89,57,27],"class_list":["post-253985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-artificial-intelligence","tag-flaw","tag-security","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/253985"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=253985"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/253985\/revisions"}],"predecessor-version":[{"id":253987,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/253985\/revisions\/253987"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/253986"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=253985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=253985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=253985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}