Anthropic's Mythos finds 10,000+ vulnerabilities across widely used software systems

Anthropic has said that its AI-driven cybersecurity system, Claude Mythos Preview, has identified more than 10,000 high- and critical-severity vulnerabilities across widely used software systems within weeks. The update, shared as part of the company’s Project Glasswing initiative, suggests that the limiting factor in cybersecurity is no longer the discovery of vulnerabilities, but the ecosystem's ability to process and fix them.

“Progress on software security used to be limited by how quickly we could find new vulnerabilities. Now it’s limited by how quickly we can verify, disclose, and patch,” the company said.

What is Mythos?

Anthropic has described Mythos as a tightly restricted and carefully monitored system, given the advanced nature of its capabilities and the potential risks associated with misuse. It is a frontier AI model that has not yet been released publicly and is capable of analyzing software behaviour, identifying vulnerabilities, and in some cases autonomously discovering exploit paths within complex systems.

Anthropic is currently providing limited access to some of these capabilities through Project Glasswing, where select organisations are testing and integrating the system under controlled conditions.

Anthropic has worked with around 50 partner organisations under Project Glasswing, including companies maintaining critical infrastructure software. According to the company, most partners have individually identified hundreds of high- or critical-severity vulnerabilities within their own systems.

 In aggregate, this has crossed 10,000 vulnerabilities, while several partners reported that their bug discovery rates increased by more than 10 times after using the system, according to Anthropic.