Anthropic Expands Project Glasswing to 150 More Organizations
Summary
Anthropic is expanding Project Glasswing to about 150 organizations, giving them access to Mythos for security work. The company reports more than 23,000 potential vulnerabilities identified, but says only 75 critical and high-severity issues have been patched.
Key points
- The expansion adds about 150 organizations across more than 15 countries; new participants must meet Anthropic’s standards for access.
- Partners include critical infrastructure providers and vendors or maintainers of widely used codebases. Anthropic says a successful attack on most participants could affect more than 100 million people.
- Existing Project Glasswing partners used Claude Mythos Preview to scan codebases and identified thousands of vulnerabilities.
- Anthropic says Mythos identified more than 23,000 potential vulnerabilities and estimates that more than 6,000 will be confirmed as severe flaws.
- The article says only 75 critical- and high-severity bugs among the thousands found by Mythos have been patched so far.
- The Financial Times reported that new participants include Okta, Samsung, ENISA and NATO; Anthropic has not published the expanded partner list.
- Anthropic says it is working with partners to scale up vulnerability review and patching in open-source software and improve disclosure practices.
Article Details
- Event Type
- Expansion of Anthropic’s collaborative cybersecurity program, Project Glasswing, providing additional organizations access to an AI model for vulnerability discovery and remediation.
- Impact
- About 150 additional organizations will be considered for access to Claude Mythos Preview, adding to roughly 50 initial partners. Partners have used Mythos to scan codebases and identify vulnerabilities; Anthropic reported more than 23,000 potential vulnerabilities and estimated over 6,000 would be confirmed as severe, while 75 critical and high-severity issues had been patched. The newly added partners reportedly include Okta, Samsung, ENISA, and NATO, according to the Financial Times; Anthropic has not disclosed the full list.
Vendors
AnthropicAnthropic announced on Tuesday that it is expanding Project Glasswing, its collaborative program aimed at securing critical software using AI.CloudflareOrganizations such as Mozilla, Palo Alto Networks, and Cloudflare saw good results when turning Mythos against their own products.MozillaOrganizations such as Mozilla, Palo Alto Networks, and Cloudflare saw good results when turning Mythos against their own products.OktaAnthropic has not shared the expanded list of partners, but the Financial Times reported that the newly added organizations include Okta, Samsung, the EU cybersecurity agency ENISA, and NATO.Palo Alto NetworksOrganizations such as Mozilla, Palo Alto Networks, and Cloudflare saw good results when turning Mythos against their own products.SamsungAnthropic has not shared the expanded list of partners, but the Financial Times reported that the newly added organizations include Okta, Samsung, the EU cybersecurity agency ENISA, and NATO.
Products
Countries
Industries
CommunicationsThese partners are based in more than 15 countries and include providers of critical infrastructure in sectors such as power, water, healthcare, communications, and hardware.hardwareThese partners are based in more than 15 countries and include providers of critical infrastructure in sectors such as power, water, healthcare, communications, and hardware.HealthcareThese partners are based in more than 15 countries and include providers of critical infrastructure in sectors such as power, water, healthcare, communications, and hardware.PowerThese partners are based in more than 15 countries and include providers of critical infrastructure in sectors such as power, water, healthcare, communications, and hardware.waterThese partners are based in more than 15 countries and include providers of critical infrastructure in sectors such as power, water, healthcare, communications, and hardware.