Claude Mythos AI Recognized 10,000+ Software program Vulnerabilities in One Month

Synthetic intelligence security startup, Anthropic, just lately shared the primary outcomes of a brand new program known as Mission Glasswing. Launched in April 2026, the defensive initiative checks a extremely succesful, unreleased AI mannequin named Claude Mythos Preview to seek out safety weaknesses within the software program.

Enormous Variety of Flaws Found in Free Software program

Preliminary knowledge reveals the AI is quick at discovering flaws. In only one month, Anthropic and its 50 restricted companions recognized greater than 10,000 high- or critical-severity safety gaps throughout main software program programs.

Anthropic additionally used the instrument to examine over 1,000 open-source software program initiatives. This refers to free, public code underneath the hood of billions of on a regular basis units. Over 23,000 complete potential bugs have been noticed, and to cross-verify the findings, six unbiased safety analysis corporations examined the information. Exterior specialists confirmed 1,726 actual flaws, together with round 1,000 high-risk points. Anthropic believes the ultimate depend of extreme bugs will attain 6,200 as checking continues.

One main discovery occurred inside wolfSSL, an open-source safety library utilized by 5 billion sensible devices and routers to encrypt knowledge. The AI found a important certificates forgery flaw, now formally catalogued as CVE-2026-5194. It has a excessive severity score of 9.3 out of 10, although the analysis agency Crimson Hat charges it a most 10.

The AI even constructed a mock assault demonstrating how cybercriminals may exploit this flaw to forge digital identities and host faux financial institution web sites that seem completely actual to common customers.

Tech Firms Face a Enormous Repair-It Backlog

Discovering flaws is now a lot faster than fixing them, making a backup for human groups. Whereas the common time to patch a bug is 2 weeks, a number of tech corporations are utilizing the information to wash up their functions:

 Cloudflare discovered 2,000 bugs throughout its programs.

• Mozilla fastened 271 flaws in its Firefox 150 net browser, a large bounce from what older AI instruments present in Firefox 148.

•  Palo Alto Networks, Microsoft, and Oracle are rolling out fixes a lot sooner than their common pace.

• Other than software program testing, the AI helped a associate financial institution cease a fraudulent 1.5-million-dollar wire switch after an unknown hacker took over a buyer’s electronic mail and made spoof telephone calls.

As a result of this AI mannequin is highly effective, Anthropic is preserving it personal to stop menace actors from utilizing it offensively. Nevertheless, the corporate plans to broaden this system to the UK and US governments whereas people work on patching the 1000’s of safety gaps already discovered.