Study: firms with Claude Mythos Preview access more than doubled vulnerability disclosures
An arXiv paper on Project Glasswing finds outside researchers later reported about half as many bugs in those firms' code, and fewer disclosed flaws were exploited within a month.
Why it matters
Project Glasswing gave a group of firms early access to Anthropic's Claude Mythos Preview for defensive security work. This arXiv paper by Thomas Mosk compares those firms with Chinese and Russian firms that had no access. It finds the Glasswing firms more than doubled their vulnerability disclosures and disclosed about 150% more high-impact flaws. External researchers later reported about half as many vulnerabilities in their code, and the share exploited within a month fell by about two thirds. It is a single preprint that has not been peer reviewed, so the size of the effect needs checking.
Key facts
- arXiv paper 2611.06629 by Thomas Mosk
- Compares Project Glasswing firms with Chinese and Russian firms
- Disclosures more than doubled
- About 150% more high-impact vulnerabilities disclosed
- Share exploited within a month fell about two thirds
- Preprint, not peer reviewed