VulnCheck audit: only 0.57% of Anthropic Glasswing's 37,966 findings ever fixed

WeldPond · x · 2026-11-12

Security firm VulnCheck audited Anthropic's 7-month Project Glasswing (Mythos) ledger: of 37,966 findings, 80.6% aren't in the public ledger and only 217 (0.57%) were actually fixed. From Sept 8 to Nov 2, findings jumped +11,813 while fixes rose just +15 and duplicates exploded from 2 to 1,670. Worse, the unreviewed OSS scanner sent 45 reports to curl's Daniel Stenberg; 19 of the 34 published so far (55.9%) were rejected as vuln:NONE.

Related event: VulnCheck Audit: Only 217 of 37,966 Anthropic Glasswing Bug Findings Fixed(4 posts)→

Original post →

More from Models

Models channel →