Anthropic launches Project Glasswing to defend critical software against AI-powered attacks
Anthropic has announced Project Glasswing, a new initiative to secure critical software infrastructure against AI-powered attacks. The project includes 11 major partners including Amazon, Apple, Google, Microsoft, and NVIDIA, and will use Claude Mythos Preview, an unreleased general-purpose model from Anthropic that claims to have found thousands of exploitable vulnerabilities across major operating systems and web browsers.
Anthropic Launches Project Glasswing to Defend Against AI-Powered Cyberattacks
Anthropichas announced Project Glasswing, an initiative designed to secure critical software infrastructure against emerging AI-powered threats. The program enlists 11 major technology partners: Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, NVIDIA, and Palo Alto Networks.
Participants will use Claude Mythos Preview, an unreleased general-purpose AI model from Anthropic, to enhance their security operations. According to Anthropic, this model has identified thousands of exploitable vulnerabilities, including in every major operating system and web browser.
Model Details and Scope
Clause Mythos Preview represents Anthropic's approach to defensive cybersecurity applications. The company states the initiative aims to prevent malicious AI deployment that could create severe economic and security consequences. Rather than releasing the model publicly, Anthropic is restricting access to vetted security organizations and critical infrastructure partners.
The breadth of the partner consortium—spanning cloud providers, hardware manufacturers, security firms, and financial institutions—suggests the initiative targets vulnerabilities across multiple attack surfaces and technology stacks.
Context and Previous Actions
This announcement reflects Anthropic's stated commitment to AI ethics and responsible deployment. Earlier in 2025, Anthropic refused to remove safety guardrails on its Claude service for U.S. Department of Defense applications, which resulted in the DoD designating Anthropic a "supply chain risk." The company has maintained strict policies around its models' use cases despite pressure from government and military entities.
However, Anthropic's own Claude model was reportedly leveraged by a hacker in February to attack multiple government agencies in Mexico, underscoring the dual-use vulnerability inherent in capable AI systems.
What This Means
Project Glasswing positions Anthropic as a proactive actor in AI safety infrastructure rather than solely a model provider. By restricting access to Claude Mythos Preview to security-focused partners, Anthropic attempts to capture the defensive applications of advanced AI while limiting offensive exploitation risk. The partnership roster indicates serious commitment from major infrastructure stakeholders, though the initiative's real-world impact will depend on execution and whether identified vulnerabilities are actually remediated at scale. The timing also serves Anthropic's strategic interests following the DoD designation, demonstrating tangible national security contributions outside military applications.
Related Articles
Anthropic unveils Claude Mythos model, finds thousands of OS vulnerabilities via Project Glasswing
Anthropic has unveiled Claude Mythos, a new AI model designed for cybersecurity that has already discovered thousands of high-severity vulnerabilities in every major operating system and web browser. The model is being distributed as a preview to over 40 organizations and major technology partners including Apple, Google, Microsoft, and Amazon Web Services through Project Glasswing, a coordinated cybersecurity initiative.
Anthropic's Claude Mythos can find zero-day exploits faster than defenders can patch them
Anthropic announced Claude Mythos Preview, a new frontier model with advanced reasoning capabilities that can identify and chain together multiple vulnerabilities into novel attacks—abilities the company says outpace current defensive capabilities. The model has already discovered thousands of high-severity vulnerabilities including a 27-year-old OpenBSD flaw and exploits for multiple operating systems. To manage the risk, Anthropic launched Project Glasswing, granting early access to 40+ companies including Apple, Google, Microsoft, and Cisco, providing $100M in usage credits for defensive security work.
Anthropic restricts Claude Mythos to security researchers under Project Glasswing
Anthropic has not publicly released Claude Mythos, instead restricting access to a vetted set of partners through Project Glasswing. The company claims the model's cybersecurity research abilities—including finding thousands of high-severity vulnerabilities in major operating systems and browsers—warrant controlled deployment until industry safeguards mature.
Apple, Google, Microsoft join Anthropic's Project Glasswing to find critical software vulnerabilities
Twelve major technology companies—including Apple, Google, Microsoft, Amazon, and Nvidia—have launched Project Glasswing, a coordinated effort to identify and patch critical software vulnerabilities using Anthropic's unreleased Mythos Preview model. The initiative discovered thousands of zero-day vulnerabilities in mission-critical software, including a 27-year-old bug in OpenBSD and a 16-year-old vulnerability in widely-used video software that automated testing tools had missed.
Comments
Loading...