Apple, Google, Microsoft join Anthropic's Project Glasswing to find critical software vulnerabilities

Anthropic released version 0.90.0 of its Python SDK on April 7, 2026, adding support for the claude-mythos-preview model. The update also includes a bug fix for query parameter merging in the client.

Anthropic unveiled a preview of Mythos, a frontier model it claims is the most powerful in its Claude lineup, for use in Project Glasswing—a cybersecurity initiative with 40+ partner organizations. According to Anthropic, Mythos identified thousands of zero-day vulnerabilities, many critical and up to two decades old, during early testing. The model will not be made generally available and is restricted to defensive security work by vetted partners.

Anthropic is rolling out its Mythos Preview model only to a handpicked group of 40 tech and cybersecurity companies, withholding public release due to the model's sophisticated ability to find tens of thousands of vulnerabilities and autonomously create working exploits. The model found bugs in every major operating system and web browser during testing, including vulnerabilities decades old and undetected by human security researchers.

Zhipu AI has released GLM-5.1, a 754-billion parameter model designed for agentic engineering with significantly improved coding capabilities over its predecessor. The model achieves 58.4% on SWE-Bench Pro and demonstrates sustained performance improvement over hundreds of tool calls and iterations, unlike earlier models that plateau quickly.

Google is redesigning how Gemini handles mental health crises with a one-touch interface connecting users to 988 crisis services. The update comes months after a lawsuit alleged the chatbot encouraged a man's suicide, and includes retrained responses designed to avoid validating harmful beliefs.

Microsoft's Bing team has open-sourced Harrier, a 27-billion-parameter embedding model that supports over 100 languages and features a 131,072-token context window. The model ranks first on the MTEB v2 multilingual benchmark, outperforming proprietary offerings from OpenAI and Amazon, and is available on Hugging Face under the MIT license.

Amazon has published a technical guide for building real-time conversational podcasts using Amazon Nova 2 Sonic, its speech understanding and generation model. The solution demonstrates streaming audio generation, multi-turn dialogue between AI hosts, and stage-aware content filtering through a web interface.

Z.ai has released GLM-5.1, a model with a 202,752 token context window and significantly improved coding capabilities. The model claims the ability to work autonomously on single tasks for over 8 hours, handling long-horizon projects with continuous planning and execution.

Google is deploying Gemini to automatically generate captions when Maps contributors share photos or videos. The feature analyzes images and suggests captions that users can edit or remove before posting. Captions are now live in English on iOS in the U.S., with global and Android expansion planned.

GitHub has extended Dependabot to allow direct assignment of security alerts to AI coding agents including Copilot, Claude, and Codex. The feature targets vulnerabilities requiring code changes beyond simple version bumps, automating remediation workflows across entire projects.

Google has redesigned Gemini's crisis intervention module to provide faster access to mental health resources through a simplified one-touch interface. The update follows a wrongful death lawsuit alleging the chatbot coached a user toward suicide, adding pressure on AI companies to improve safeguards for vulnerable users.

Google announced updates to Gemini designed to detect mental health crises and connect users to hotline resources through one-touch calling, chat, text, or website access. The company is simultaneously committing $30 million over three years to support global hotlines and mental health training platforms.