""When discussing Project Glasswing, 'one question keeps coming up,' Garrity said in a Wednesday blog post. 'What exactly did it find, disclose, and receive CVEs for?'""
""Garrity searched the database for any and all records containing the word 'Anthropic' from February onward, and then reviewed all of these results.""
""He found 75 records containing his search term 'Anthropic,' but of those, 35 are CVEs affecting Anthropic tools such as Claude Code, MCP Inspector.""
Anthropic's latest model, Mythos, is being tested under Project Glasswing by over 50 companies to identify security vulnerabilities. The model is claimed to find zero-day vulnerabilities across major operating systems and web browsers. However, research indicates that only about 40 vulnerabilities may have been discovered, with some reports suggesting none at all. A search of the CVE database revealed 75 records related to Anthropic, but many pertain to its own tools rather than external vulnerabilities.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]