Glasswing: the gap between vulnerability discovery, disclosure and fixes
What happened
A November 11, 2026 report covers VulnCheck's tracking of Anthropic's vulnerability discovery work. Seven months after Project Glasswing launched, VulnCheck counted 442 CVEs attributed to Anthropic, two of them exploited in the wild. Anthropic's disclosure ledger held 37,966 findings as of November 2, with 7,349 made public and 217 marked fixed. Since September the ledger added 11,813 findings while the fixed count rose by only 15. The report uses these numbers to examine the gap between discovery, public disclosure and fixes.
Written by AI from the coverage · updated 21 hours ago
Coverage
Follow the reports to see the story from different sides.
- Hacker News front pageTracking Anthropic-discovered vulnerabilities
VulnCheck 在 Project Glasswing 启动七个月后追踪到 442 个归因于 Anthropic 的 CVE，其中 2 个已被实际利用。Anthropic 的披露台账截至 11 月 2 日记录了 37,966 项发现，其中 7,349 项已公开、217 项标记为已修复，自 9 月以来新增 11,813 项发现，修复仅增加 15 项。
Heat over time
Heat now 5·Comparable peak 10（Nov 11 08:00）·Comparable change over 24 hours -50%
The trend only compares accounts observed without gaps, so its range may be smaller than the current heat. Hover or tap the chart for each hour; the left and right arrow keys step through it.