product updateAnthropic

Anthropic launches Project Glasswing to defend critical software against AI-powered attacks

TL;DR

Anthropic has announced Project Glasswing, a new initiative to secure critical software infrastructure against AI-powered attacks. The project includes 11 major partners including Amazon, Apple, Google, Microsoft, and NVIDIA, and will use Claude Mythos Preview, an unreleased general-purpose model from Anthropic that claims to have found thousands of exploitable vulnerabilities across major operating systems and web browsers.

2 min read
0

Anthropic Launches Project Glasswing to Defend Against AI-Powered Cyberattacks

Anthropichas announced Project Glasswing, an initiative designed to secure critical software infrastructure against emerging AI-powered threats. The program enlists 11 major technology partners: Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, NVIDIA, and Palo Alto Networks.

Participants will use Claude Mythos Preview, an unreleased general-purpose AI model from Anthropic, to enhance their security operations. According to Anthropic, this model has identified thousands of exploitable vulnerabilities, including in every major operating system and web browser.

Model Details and Scope

Clause Mythos Preview represents Anthropic's approach to defensive cybersecurity applications. The company states the initiative aims to prevent malicious AI deployment that could create severe economic and security consequences. Rather than releasing the model publicly, Anthropic is restricting access to vetted security organizations and critical infrastructure partners.

The breadth of the partner consortium—spanning cloud providers, hardware manufacturers, security firms, and financial institutions—suggests the initiative targets vulnerabilities across multiple attack surfaces and technology stacks.

Context and Previous Actions

This announcement reflects Anthropic's stated commitment to AI ethics and responsible deployment. Earlier in 2025, Anthropic refused to remove safety guardrails on its Claude service for U.S. Department of Defense applications, which resulted in the DoD designating Anthropic a "supply chain risk." The company has maintained strict policies around its models' use cases despite pressure from government and military entities.

However, Anthropic's own Claude model was reportedly leveraged by a hacker in February to attack multiple government agencies in Mexico, underscoring the dual-use vulnerability inherent in capable AI systems.

What This Means

Project Glasswing positions Anthropic as a proactive actor in AI safety infrastructure rather than solely a model provider. By restricting access to Claude Mythos Preview to security-focused partners, Anthropic attempts to capture the defensive applications of advanced AI while limiting offensive exploitation risk. The partnership roster indicates serious commitment from major infrastructure stakeholders, though the initiative's real-world impact will depend on execution and whether identified vulnerabilities are actually remediated at scale. The timing also serves Anthropic's strategic interests following the DoD designation, demonstrating tangible national security contributions outside military applications.

Related Articles

product update

Anthropic Reverses Course, Will Let Enterprise Customers Store Retention Data on Their Own Cloud

Anthropic is revising its 30-day data retention policy after enterprise pushback, allowing regulated-industry customers to store the required data on their own cloud infrastructure instead of Anthropic's servers. The changes, built with more than 100 customers, are set to roll out this fall.

product update

Slack Launches 'Code Channels' to Put AI Coding Agents Into Group Chats

Slack has launched Slack Code, a feature that gives AI coding agents dedicated project channels where developers and non-technical staff can watch, review, and redirect their work in real time. Anthropic, GitHub, OpenAI, Cognition, and Vercel are building integrations, bringing Claude, Copilot, ChatGPT, and Devin into Slack's group chat environment.

product update

OpenAI Launches 'Private Safety Processing' to Detect Misuse Without Storing Enterprise Data

OpenAI has built a system called Private Safety Processing that detects misuse patterns across multiple interactions without storing customer inputs or outputs. The company says it only receives narrow safety signals—type and severity of activity—while data stays encrypted on customer infrastructure.

product update

OpenAI Previews 'Private Safety Processing' to Detect Abuse Without Retaining Customer Data

OpenAI is previewing Private Safety Processing to select customers, an automated system that monitors for misuse across multiple sessions without retaining any customer data. The move directly contrasts with Anthropic's July policy allowing 30-day data retention for 'covered models' like Fable.

Comments

Loading...