After 7 Months, Glasswing Overwelms Maintainers with Underwhelming Findings
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthropic’s 37,966 reported findings, only 7,349 (19.4%) have been made public and just 217 have been marked fixed.
After seven months, Anthropic's Project Glasswing has identified 442 CVEs, less than 0.5% of all CVEs this year, according to an independent tracker.
Project Glasswing identified 442 CVEs in seven months, or 0.5% of all CVEs this year.
An independent tracker found more vulnerabilities than Anthropic's own public ledger, which lists 217 fixed vulnerabilities.
The project's claims of finding thousands of vulnerabilities were not supported by evidence, raising questions about hype versus reality.
Summarised automatically by AI from the original article by Hacker News. AI can make mistakes, so check the original for details.
We're seven months into Anthropic's flagship Project Glasswing, and it's time for another update on the results. I've been tracking the project to see whether its claims are overhyped or grounded in reality.
As we all recall, Anthropic launched Project Glasswing on April 7th, claiming, "We have identified thousands of additional high- and critical-severity vulnerabilities that we are working on responsibly disclosing to open source maintainers." What surprised me was how little evidence the project offered, which made me wonder whether this was more of an overhyped marketing campaign.
That said, we shouldn't overlook that AI is an effective tool for finding vulnerabilities. But that story goes well beyond any single frontier model's capabilities.
Read the full story on Hacker NewsThat's the opening of the story. The full piece is published by Hacker News.
