Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

What’s new: Anthropic’s Project Glasswing has identified over 10,000 high- or critical-severity vulnerabilities in widely used software since its launch in April 2026. Of these, 6,202 are classified as high- or critical-severity flaws affecting more than 1,000 open-source projects, with 1,726 confirmed as valid true positives. A notable vulnerability includes a critical flaw in WolfSSL (CVE-2026-5194, CVSS score: 9.1) that could allow attackers to forge certificates. The initiative aims to enhance cybersecurity by enabling early detection of vulnerabilities.

Who’s affected

Organizations using affected open-source software, particularly those relying on WolfSSL and similar libraries, are at risk. The vulnerabilities identified could potentially impact a wide range of systems and applications globally.

What to do

• Review and patch systems using WolfSSL and other identified vulnerable software as soon as possible.
• Shorten patch testing and deployment timelines to address vulnerabilities quickly.
• Implement security best practices, including hardening network configurations and enforcing multi-factor authentication.
• Utilize the Cyber Verification Program for legitimate vulnerability research and testing.

Sources

• The Hacker News