07-13
High-Severity CVEs Spike 3.5x After Claude Mythos Release
In April 2026, Anthropic announced that Claude Mythos Preview could autonomously discover software vulnerabilities. Since then, Project Glasswing partners including Microsoft, Google, Apple, and AWS have used it to find and fix over 10,000 high- or critical-severity bugs. Data from Epoch shows that the number of such CVEs disclosed by 21 notable organizations surged to ~1,500 in June 2026 — more than 3.5x the previous monthly record before Mythos. OpenAI's Daybreak product has pursued similar efforts. The spike reflects both proactive patching and an overall increase in vulnerability discovery driven by frontier models, raising important questions for security researchers, AI safety policy makers, and open-source maintainers.