# project glasswing Published articles for project glasswing. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Chainguard and Athena prepare to disclose vulnerabilities found by frontier AI models DevFeed: [Chainguard and Athena prepare to disclose vulnerabilities found by frontier AI models]() Original publisher: [Read original article]() Published: 2026-09-15T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [Vulnerabilities](), [chainguard](), [anthropic](), [Software](), [Code](), [Open Source]() Tags: [ai](), [anthropic](), [infrastructure](), [project-glasswing](), [software](), [vulnerabilities]() ### AI overview This opinion post reports on Chainguard's Athena initiative and its plans to begin disclosing 50 model-generated vulnerability findings. It discusses Anthropic's Project Glasswing, vulnerability discovery, responsible disclosure, patch pipelines, and infrastructure the company plans to open source. ### Source excerpt Frontier AI is finding zero-days faster than the industry can fix them. See how Chainguard and Athena are preparing for what comes next. ## Athena spotlight: Black Duck on the importance of flagging zero-days at scale DevFeed: [Athena spotlight: Black Duck on the importance of flagging zero-days at scale]() Original publisher: [Read original article]() Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Vulnerabilities](), [Artificial Intelligence](), [Frontier AI](), [Frontier Model](), [Security](), [Open Source]() Tags: [ai](), [anthropic](), [athena](), [attacks](), [chainguard](), [code](), [container-images](), [frontier-ai](), [frontier-ai-models](), [frontier-model](), [management](), [mythos](), [open-source](), [osv](), [project-glasswing](), [scale](), [security](), [source](), [vulnerabilities]() ### AI overview The article explains how Black Duck and the Athena coalition address the growing volume of AI-discovered open source zero-day vulnerabilities. Athena members use frontier models to scan sandboxed applications, while Chainguard triages, validates, and remediates findings and shares artifacts and OSV data. Black Duck uses that feed to alert customers and provide mitigation and remediation guidance. ### Source excerpt AI can find zero-days faster than teams can fix them. See how Black Duck and Athena work together to turn findings into actionable protection. ## AI-driven zero-day combinations are challenging software security and open-source consumption DevFeed: [AI-driven zero-day combinations are challenging software security and open-source consumption]() Original publisher: [Read original article]() Published: 2026-05-28T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [open-source-security](), [Security](), [Open Source](), [Machine Learning, Security Attacks](), [Critical Infrastructure](), [openssf](), [sigstore]() Tags: [ai](), [anthropic-mythos](), [chainguard-containers](), [critical-infrastructure](), [fork](), [mfa](), [mythos](), [open-source](), [open-source-security](), [openssf](), [oss](), [project-glasswing](), [rust](), [sast](), [secure-open-source](), [security](), [sigstore]() ### AI overview The article argues that Mythos represents a potential new class of software-security threat: AI-driven combinations of existing issues that can produce more serious attacks than individual scanner findings. It discusses the limits of government regulation and calls for stronger trust infrastructure, coordinated disclosure, and safer open-source consumption. ### Source excerpt Mythos is changing software security fast. AI-driven zero-days demand new trust infrastructure, coordinated disclosure, and secure open source consumption. ## 5 security myths that Mythos ended (as told by a CISO) DevFeed: [5 security myths that Mythos ended (as told by a CISO)]() Original publisher: [Read original article]() Published: 2026-05-27T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [Artificial Intelligence](), [Exploit](), [Vulnerabilities](), [anthropic](), [dataset]() Tags: [ai](), [ai-security](), [anthropic](), [anthropic-mythos-preview](), [chainguard-ai](), [chainguard-containers](), [cve](), [dataset](), [exploits](), [git](), [mythos](), [project-glasswing](), [security](), [vulnerabilities]() ### AI overview The article argues that Anthropic's Mythos and broader AI-driven vulnerability discovery are invalidating long-standing security assumptions. It focuses on shrinking exploitation timelines, the growing importance of proactive vulnerability elimination, and the need for security teams to retire reactive mental models. ### Source excerpt Mythos and AI-driven exploits are breaking old security assumptions. Learn the five myths security teams must retire to survive the new era. ## Security Week 2622: эффективность Claude Mythos по версии Cloudflare DevFeed: [Security Week 2622: эффективность Claude Mythos по версии Cloudflare]() Original publisher: [Read original article]() Author: Kaspersky\_Lab ("Лаборатория Касперского") Published: 2026-05-25T16:39:09Z Content type: article Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [Claude](), [Security](), [Cloudflare](), [anthropic](), [Firefox](), [Mozilla]() Tags: [anthropic](), [claude](), [claude-mythos](), [cloudflare](), [firefox](), [mozilla](), [mythos](), [project-glasswing](), [security](), [tag-9fe8963de219]() ### AI overview The article discusses Cloudflare's account of testing Anthropic's Claude Mythos for automated vulnerability research. It reports that the model found vulnerabilities in Cloudflare's codebase and could construct exploit chains to provide evidence of a bug's danger. The article also describes Cloudflare's supporting workflow, which narrows the analysis scope and runs multiple investigations in parallel to improve the balance between actionable findings and noise. ### Source excerpt На прошлой неделе компания Cloudflare поделилась своими впечатлениями о работе ИИ-модели Claude Mythos. Эта модель разработана компанией Anthropic, и в данный момент доступ к ней предоставляется "по приглашениям" в рамках проекта Project Glasswing. Одной из причин такого закрытого процесса тестирования является достаточно высокая эффективность ИИ-ассистента при поиске и обнаружении уязвимостей. Независимые подтверждения этой эффективности уже были опубликованы ранее, например от команды разработчиков браузера Mozilla Firefox. В отличие от отчета Mozilla, Cloudflare в своей публикации не приводит примеры обнаруженных уязвимостей. Говорится только о том, что Mythos тестировалась на кодовой базе Cloudflare и что уязвимости действительно были обнаружены. Зато Cloudflare не ограничивается простым тезисом о том, что для эффективной работы ИИ-модели требуется разработка соответствующей обвязки, а подробно описывает, на какие этапы внутри этой обвязки разбивается автоматизированный поиск уязвимостей. Читать далее ## Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOS DevFeed: [Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOS]() Original publisher: [Read original article]() Published: 2026-05-11T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard os](), [chainguard containers](), [Security](), [Critical Infrastructure](), [Package Management](), [Open Source](), [Cloud Native Ecosystem](), [Resilience](), [APK](), [Linux]() Tags: [chainguard](), [chainguard-containers](), [chainguard-finserv](), [chainguard-os](), [cloud](), [cloud-native](), [compatibility](), [compliance](), [container](), [container-images](), [containers](), [critical-infrastructure](), [cve](), [dependencies](), [hardening](), [images](), [linux](), [make](), [mythos](), [open](), [open-source](), [project-glasswing](), [rhel](), [rhel-10](), [rhel-9]() ### AI overview Chainguard announces first-party RHEL 9 and RHEL 10 RPM compatibility for packages in Chainguard Containers built on Chainguard OS. The company also announces that it is joining FINOS to support open source collaboration in financial infrastructure. ### Source excerpt Chainguard adds first-party RHEL 9/10 RPM compatibility and joins FINOS, helping financial institutions modernize securely for the AI-driven threat era. ## AI is finding vulnerabilities faster than anyone can patch them. Now what? DevFeed: [AI is finding vulnerabilities faster than anyone can patch them. Now what?]() Original publisher: [Read original article]() Published: 2026-04-10T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [Vulnerabilities](), [Artificial Intelligence](), [supply-chain-security](), [Claude](), [anthropic](), [Maintainers](), [Open Source](), [Exploit](), [Operating system](), [browser]() Tags: [ai](), [anthropic](), [attacks](), [chainguard-for-ai](), [claude](), [claude-mythos-preview](), [cves](), [exploit](), [maintainers](), [open-source](), [project-glasswing](), [security](), [software-supply-chain](), [software-supply-chain-security](), [supply-chain-attacks](), [vulnerabilities]() ### AI overview The article argues that AI systems such as Claude Mythos Preview are discovering zero-day vulnerabilities faster than organizations and open-source maintainers can patch them. It describes the resulting risks for software supply chains, including faster exploitation, uneven vendor response, and increased pressure on maintainers, while presenting verifiable-source, secure-by-default artifacts as a defensive approach. ### Source excerpt Project Glasswing and Claude Mythos Preview reveal a surge in zero-days. Learn why reactive patching fails and how secure-by-default supply chains keep you safe.