April 7, 2026
Anthropic announces Project Glasswing and Claude Mythos Preview
AWS, Apple, Google, Microsoft, the Linux Foundation and others get early access to an unreleased model that finds and exploits vulnerabilities better than all but the best humans.
On April 7, 2026 Anthropic announced Project Glasswing with Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, NVIDIA and Palo Alto Networks, plus more than 40 organisations that maintain critical software.
The reason was Claude Mythos Preview, an unreleased model that had found thousands of zero-days, including a 27-year-old remote crash in OpenBSD, a 16-year-old bug in FFmpeg that fuzzers had hit five million times, and a chain of Linux kernel bugs leading to full root. Anthropic committed up to $100M in usage credits and $4M in donations to open-source security organisations.
Glasswing is the origin of the pipeline OSS Scanner later opened to maintainers.
Sources
Want to see what an AI audit finds in your project? Quick scans are free and take a few minutes.
Scan a repository