Anthropic summarizes seven months of Project Glasswing

Anthropic has published a report on the results of Project Glasswing, an initiative launched seven months ago to find software vulnerabilities. During the system's operation, 442 CVEs (Common Vulnerabilities and Exposures) were discovered, though the practical significance of these findings has proven to be mixed.

According to the analysis, only 2 of the identified vulnerabilities have been recorded in real-world attacks ("exploited in the wild"). At the same time, 94% of all found issues remain unpatched, and the number of duplicate reports has increased significantly, creating an additional burden for project maintainers.

The results of Project Glasswing highlight the gap between the scale of automated bug hunting and the actual need for remediation. For developers and security professionals, this means a need to rethink approaches to prioritizing reports generated by AI systems in order to avoid "noise" and focus on critical threats that truly pose a risk to infrastructure.