Project Glasswing
AI overview
Sign in and the AI will write an overview from our coverage.
Headlines · 6
- Bank of America hired 1,000 contractors to patch flaws exposed by Anthropic's Mythos
Bank of America CEO Brian Moynihan said on 14 October, in a CNBC interview and on the bank's earnings call, that it brought in about 1,000 outside contractors in the second quarter to patch software vulnerabilities exposed by AI models including Anthropic's Mythos, on top of roughly 3,000 internal staff already doing similar work. He said the contractors were hired as consultants and are not counted in headcount, and that the weaknesses lay in code used by the bank and its outside vendors. Moynihan said third-quarter remediation costs, covering both the Mythos work and anti-money-laundering fixes, came to "a couple hundred million dollars plus," without breaking out the patching figure alone, and said he expects the Mythos share to shrink. The Next Web said it had not independently verified the numbers; Anthropic made Mythos available in April through Project Glasswing to a small group of companies, banks and government agencies.
The Next Web · 🔥 0 - The open-model debate: safety risks vs. concentrated AI power
An MIT Technology Review article examines the long-running debate over open-weight models, noting that Anthropic published a report arguing Z.ai's GLM-5.3, released in August and freely downloadable, could pose a major cyberattack risk. It lays out the benefits of openness — research transparency, lower enterprise deployment costs and preventing over-concentration of AI power — against concerns that open models lack prompt filtering and account bans, and that their safety alignment can be stripped by retraining. It adds that as of publication the top eight models on Artificial Analysis's LLM leaderboard were all closed, while researchers explore tamper-resistant models and staged release as middle-ground options.
MIT科技评论中文 · 🔥 0 - Open models: real benefits vs. catastrophic risks
MIT Technology Review published an explainer on the debate over open-weight models. It notes that Anthropic argued in a report last month that GLM-5.3, released in August by Chinese company Z.ai, poses a major cyberattack risk because anyone can freely download and modify it; the top eight models on the Artificial Analysis LLM leaderboard are all closed, though open models lag by only a few months. Supporters cite reduced concentration of power, research access and lower cost (per a Mozilla report), while critics point out that downloaded models have no prompt filters, access cannot be revoked, and safety training can be retrained away. The piece also cites the July autonomous OpenAI-agent hack against Hugging Face, Anthropic's report that several hacking operations used Claude, and the Project Glasswing cyber-defense effort.
MIT Technology Review AI · 🔥 0 - Anthropic's free OSS Scanner: who audits the auditor?
On Oct 8, 2026, Anthropic launched two free arrangements under the name Anthropic Cyber Mission: the Critical Infrastructure Defense Program (CIDP), which puts frontier Claude models, embedded engineers and threat research behind 11 founding partners including Accenture, CrowdStrike, Deloitte, Palo Alto Networks, PwC and Rockwell Automation to protect power-grid, water and transport OT systems; and OSS Scanner, a free opt-in service using Anthropic's strongest models, including Claude Mythos, to scan open-source projects. The piece says the models found over 29,000 candidate vulnerabilities in six months, with only about 6,000 human-reviewed and nearly 5,000 unverified reports plus candidate patches sent straight to maintainers, and that fast-track findings are neither subject to a 90-day disclosure window nor published. It argues the structural problem is one company being model vendor, open-source auditor, critical-infrastructure gatekeeper and arbiter of what counts as a vulnerability, citing VulnCheck's September comparison in which Claude rated 91.5% of findings high or critical versus maintainers' 51.3%.
钛媒体 · 🔥 0 - Anthropic: Glasswing verified 129,000 vulnerabilities, joins Cyber Verification Program
Anthropic said on October 6 that its standalone AI-assisted vulnerability research effort, Project Glasswing, is being folded into an expanded Cyber Verification Program (CVP). It reported that partners verified at least 129,000 software vulnerabilities between April and July, while its own Claude-based scanning of open-source projects uncovered another 5,500 from April to October; more than 33,000 of the total were rated critical or high severity.
iThome 台湾 · 🔥 0 - Expanding the Cyber Verification Program
We’re launching a new, expanded version of our Cyber Verification Program (CVP), which makes advanced cyber capabilities and reduced blocking classifiers available to qualifying security professionals. The program now consists of three access tiers, which allow security teams to apply for the level of access that best suits their work. Each tier includes access to our most capable models, including Claude Opus 5.5, Claude Sonnet 5.5, Claude Mythos 5.1, and new models moving forward. Interested customers can apply here. Cybersecurity is inherently dual use: the same capabilities that enable a s
Anthropic · News · 🔥 0
Experience and discussion from the community
Share my Project Glasswing experienceAsk about Project Glasswing
Nobody has shared their experience with Project Glasswing yet.