{"id":6928,"date":"2026-11-05T08:10:03","date_gmt":"2026-11-05T08:10:03","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/?p=6928"},"modified":"2026-11-05T08:10:03","modified_gmt":"2026-11-05T08:10:03","slug":"claude-mythos-glasswing-cyber-defense-study","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/claude-mythos-glasswing-cyber-defense-study","title":{"rendered":"Claude Mythos Doubled Bug Disclosures at Glasswing Firms, Study Finds"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>The finding:<\/strong> After getting early access to Claude Mythos Preview through Project Glasswing, 13 large US tech firms more than doubled their published software vulnerabilities relative to Chinese firms barred from Anthropic&#8217;s models. High-impact flaws rose about two and a half times.<\/li><li><strong>No bottleneck, no attack wave:<\/strong> Vendors and Linux distributions fixed reported flaws as quickly as before. The share of the firms&#8217; vulnerabilities exploited within a month fell by about two thirds, while the number exploited did not change.<\/li><li><strong>Bug hunters moved, not quit:<\/strong> External researchers who used to search Glasswing code reported 57% fewer flaws there and shifted to other vendors&#8217; code.<\/li><\/ul>\n\n\n<p class=\"wp-block-paragraph\">When Anthropic launched Project Glasswing in April 2026, it gave a small group of companies early access to Claude Mythos Preview, a model that finds and exploits software flaws with little human help and that Anthropic said it would not make generally available. A new working paper by economist Thomas Mosk (Queen Mary University of London), &#8220;Does Frontier AI Strengthen Cyber Defense? Evidence from Project Glasswing&#8221;, estimates what that access did. Using the universe of publicly disclosed vulnerabilities, it asks: did defenders find more, did independent researchers lose out, and did attackers profit?<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd2c What the study shows<\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>More than double the disclosures:<\/strong> Relative to Chinese firms, Glasswing firms&#8217; monthly disclosures rose by 0.784 log points, about 120%. At their pre-launch average of 29 vulnerabilities per firm and month, that is about 36 more each month. Excluding Anthropic itself, the estimate is 0.862.<\/li><li><strong>Not just the easy bugs:<\/strong> Memory-safety flaws, the class AI finds most easily, roughly doubled. Other flaws rose at least as much, and complex weaknesses such as missing authorization checks rose about as much as machine-verifiable ones. High-impact vulnerabilities rose most, about two and a half times, or about 23 more per firm and month.<\/li><li><strong>New finds, not a backlog:<\/strong> The median time between reserving an identifier and publishing it fell from 75 to 22 days. Internally found vulnerabilities rose from about 4 to 32 a month per firm, an eightfold increase, while external reports roughly tripled.<\/li><li><strong>No fixing slowdown:<\/strong> Vendors fixed Zero Day Initiative reports at least as fast as before, and the estimates rule out a slowdown of more than about 13%. Linux distributions such as Debian, Ubuntu, Red Hat and SUSE, which had no access, still shipped fixes after a median of one day.<\/li><li><strong>External researchers reallocated:<\/strong> A researcher who had worked only on Glasswing code reported 57% fewer Glasswing vulnerabilities after launch and about two and a half times as many in other non-Chinese vendors&#8217; code. The probability of being active in a month did not change.<\/li><li><strong>Fewer zero-days as a share:<\/strong> The probability that a Glasswing vulnerability was already exploited when disclosed fell by about 70% relative to Chinese firms. Predicted exploitation scores (EPSS) did not change, so the added flaws looked as dangerous as before.<\/li><\/ul>\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1344\" height=\"768\" src=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/chart-glasswing-disclosures-by-type.webp\" alt=\"Horizontal bar chart of difference-in-differences estimates in log points for Glasswing firms versus Chinese firms by vulnerability type: high impact 0.919, machine-verifiable 0.825, all vulnerabilities 0.784, not AI-exposed 0.768, remote without credentials 0.747, complex weakness 0.720, AI-exposed 0.642, many releases 0.580. All are significant at the 1% level.\" class=\"wp-image-6927\" srcset=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/chart-glasswing-disclosures-by-type.webp 1344w, https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/chart-glasswing-disclosures-by-type-300x171.webp 300w, https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/chart-glasswing-disclosures-by-type-1024x585.webp 1024w, https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/chart-glasswing-disclosures-by-type-768x439.webp 768w\" sizes=\"auto, (max-width: 1344px) 100vw, 1344px\" \/><figcaption class=\"wp-element-caption\">i10X chart based on data from Mosk (2026), arXiv:2611.06629, Table 3. Estimates in log points from regressions of log(1 + N); 0.784 corresponds to about +120% according to the paper.<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Outcome (Glasswing vs. Chinese firms)<\/th><th>Pre-launch rate, Glasswing<\/th><th>Change after access<\/th><\/tr><\/thead><tbody><tr><td>Exploited within 1 month<\/td><td>1.42%<\/td><td>\u22120.92 pp<\/td><\/tr><tr><td>Already exploited at disclosure (zero-day)<\/td><td>1.20%<\/td><td>\u22120.85 pp<\/td><\/tr><tr><td>Public exploit code within 1 month<\/td><td>2.84%<\/td><td>\u22121.53 pp<\/td><\/tr><tr><td>Predicted exploitation (EPSS, 1 month)<\/td><td>0.16%<\/td><td>\u22120.10 pp (not significant)<\/td><\/tr><\/tbody><\/table><figcaption class=\"wp-element-caption\">Linear probability models, Mosk (2026), arXiv:2611.06629, Table 7, Panel A. pp = percentage points.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u2705 Why it matters: Early field evidence on frontier AI in cyber defense<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Most evidence on AI and cybersecurity comes from benchmarks and lab demos. This paper measures real-world output in a market where every disclosure leaves a public trace. The setup is unusually clean for an economics study: Anthropic, not the firms, decided who got access, and Chinese firms were barred from all Anthropic models from September 2025, months before the launch. That gives a group that was never treated.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The author also tests the assumptions behind the design. An event study shows no differential trend before early access began in March 2026. A placebo launch one year earlier finds no effect (\u22120.034). Leaving out any single Glasswing firm gives estimates between 0.691 and 0.872. Because only 13 firms are treated, the paper reports tests designed for few treated units, with p-values of 0.002 or below 0.005. A comparison with 26 large non-Chinese firms gives a smaller but still significant estimate (0.339).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83e\uddea Method in brief<\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>Data:<\/strong> All 176,384 CVEs published from January 2024 to October 2026, plus 720 Chinese entries without a CVE, combined with the US National Vulnerability Database, CISA&#8217;s and VulnCheck&#8217;s catalogs of exploited vulnerabilities, public exploit code collections and daily EPSS scores.<\/li><li><strong>Treatment:<\/strong> The 12 launch partners from April 2026 (AWS, Anthropic, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, NVIDIA and Palo Alto Networks) and IBM from May 2026.<\/li><li><strong>Comparison:<\/strong> 267 Chinese firms, with Russian firms and 26 large non-Chinese firms as robustness checks. The main window runs from October 2025 to September 2026.<\/li><li><strong>Researchers:<\/strong> Credits from the CVE List, 17 vendor advisory sources and open-source databases give a database of 41,299 researchers. The finder is known for 73% of CVEs.<\/li><li><strong>Estimation:<\/strong> Difference-in-differences with firm and month fixed effects, using OLS on log counts, Poisson models and linear probability models for exploitation.<\/li><\/ul>\n\n\n<h2 class=\"wp-block-heading\">\u2753 What remains open<\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>Access vs. other AI, not AI vs. no AI:<\/strong> Chinese firms could use domestic models such as DeepSeek V4 and GLM-5.2. The estimate measures what Mythos added relative to those tools.<\/li><li><strong>Different disclosure rules:<\/strong> Chinese firms disclose under stricter national rules. The author finds no sign of a policy change around the launch, but the groups are not alike.<\/li><li><strong>Disclosure, not security in use:<\/strong> The data show published and fixed flaws, not whether users installed patches.<\/li><li><strong>Exploitation is rare:<\/strong> With 13 treated firms, the author reads the decline in exploitation as suggestive rather than established. The counts rule out a doubling of attacks, but not moderate changes.<\/li><li><strong>Lower bound:<\/strong> Anthropic reported that partners found more than 10,000 high- or critical-severity flaws within a month, far more than the roughly 470 extra disclosures a month the estimates imply. Many may still be unfixed.<\/li><li><strong>Transparency:<\/strong> This is a single-author working paper without peer review, funding statement or replication files. It relies on public data sources.<\/li><\/ul>\n\n\n<h2 class=\"wp-block-heading\">\ud83e\udded Context: From Mythos benchmarks to market outcomes<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">i10X covered the <a href=\"\/news\/anthropic-project-glasswing-ai-cybersecurity-defense\">launch of Project Glasswing<\/a> and the debate about <a href=\"\/news\/claude-mythos-restricted-ai-models\">restricted access to Claude Mythos<\/a>. The paper adds outside numbers to those claims. According to the US CAISI evaluation it cites, Mythos Preview scored 57.2 on ExploitBench, compared with 38.1 for <a href=\"\/news\/product\/claude\">Claude<\/a> Opus 4.8, 40.7 for GPT-5.5 and 21.4 for GLM-5.2. Unlike in creative markets, where generative AI raised output but lowered quality, measured quality held up here. Earlier benchmark work on <a href=\"\/news\/ai-security-agents-vs-sast-vulnbench-study\">AI security agents<\/a> showed what models can do in tests; this study shows what happened when firms used one at scale.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udee0\ufe0f What it means for security teams and policymakers<\/h2>\n\n\n<ul class=\"wp-block-list\"><li><strong>Finding is no longer the main constraint:<\/strong> Firms with frontier models can disclose far more flaws without slowing fixes, but the gap between found and disclosed flaws suggests that fixing may become the bottleneck.<\/li><li><strong>Bug bounty markets will shift:<\/strong> Independent researchers move to code the model has not reached. Programs at AI-equipped vendors may need new incentives.<\/li><li><strong>Access shapes national security:<\/strong> The author argues that a private access restriction works like an export control, creating a security gap between countries.<\/li><li><strong>Defenders&#8217; edge may be temporary:<\/strong> Once attackers get comparable models, the advantage depends on relative capabilities, the paper warns.<\/li><\/ul>\n\n\n<h2 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This article is based on the full text of the working paper (arXiv:2611.06629v1, econ.GN, submitted November 4, 2026), including the tables on robustness and exploitation. All numbers come from the paper; i10X did not reanalyze the data. Because the paper is under arXiv&#8217;s standard non-exclusive license, the chart was drawn by i10X from Table 3. AI tools assisted with research and drafting; the selection, fact-checking and final editing were done by the i10X editorial team. More company coverage is on our <a href=\"\/news\/company\/anthropic\">Anthropic<\/a> page.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd2d i10x Perspective<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The story around Mythos has been dominated by fear of AI-powered attacks. This early field evidence points the other way, at least for now: the model helped defenders find flaws before attackers used them. The open question is how long that window stays open, and who gets to be inside it.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>An economics study finds firms with early access to Claude Mythos Preview more than doubled vulnerability disclosures, fixed flaws as fast and saw no rise in exploitation.<\/p>\n","protected":false},"author":2,"featured_media":6926,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"Does Frontier AI Strengthen Cyber Defense? Evidence from Project Glasswing","paper_url":"https:\/\/arxiv.org\/abs\/2611.06629","pdf_url":"https:\/\/arxiv.org\/pdf\/2611.06629v1","doi":"","arxiv_id":"2611.06629","authors":"Thomas Mosk","institutions":"Queen Mary University of London","paper_date":"2026-11-04","venue":"Working paper (arXiv econ.GN, version 1)","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"No funding or conflict-of-interest statement; single-author working paper using public data sources.","figure_license":"Own chart redrawn from Table 3 (arXiv non-exclusive license)","paper_license":"arXiv non-exclusive license","replication":"no","study_models":"Claude Mythos Preview (access treatment); comparison firms used other AI tools, e.g. DeepSeek V4, GLM-5.2","study_sample":"177,104 disclosed vulnerabilities (Jan 2024\u2013Oct 2026); 13 Glasswing firms vs. 267 Chinese firms; 7,237 external researchers","footnotes":"","_yoast_wpseo_primary_category":""},"categories":[28,59,52],"tags":[],"companies":[39],"products":[51],"class_list":["post-6928","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security-defense","category-society-economy","category-studies","company-anthropic","product-claude"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Claude Mythos Doubled Bug Finds at Glasswing Firms - i10X News<\/title>\n<meta name=\"description\" content=\"Firms with early Claude Mythos access more than doubled vulnerability disclosures vs. Chinese firms, fixed flaws as fast and saw no rise in exploited bugs.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Claude Mythos Doubled Bug Finds at Glasswing Firms - i10X News\" \/>\n<meta property=\"og:description\" content=\"Firms with early Claude Mythos access more than doubled vulnerability disclosures vs. Chinese firms, fixed flaws as fast and saw no rise in exploited bugs.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-05T08:10:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/claude-mythos-glasswing-cyber-defense-study-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"Claude Mythos Doubled Bug Disclosures at Glasswing Firms, Study Finds\",\"datePublished\":\"2026-11-05T08:10:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study\"},\"wordCount\":1341,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/claude-mythos-glasswing-cyber-defense-study-title.webp\",\"articleSection\":[\"Security &amp; Defense\",\"Society &amp; Economy\",\"Studies\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-05T08:10:03+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study\",\"name\":\"Claude Mythos Doubled Bug Finds at Glasswing Firms - i10X News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/claude-mythos-glasswing-cyber-defense-study-title.webp\",\"datePublished\":\"2026-11-05T08:10:03+00:00\",\"description\":\"Firms with early Claude Mythos access more than doubled vulnerability disclosures vs. Chinese firms, fixed flaws as fast and saw no rise in exploited bugs.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/claude-mythos-glasswing-cyber-defense-study-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/claude-mythos-glasswing-cyber-defense-study-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Illustration: i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/claude-mythos-glasswing-cyber-defense-study#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Claude Mythos Doubled Bug Disclosures at Glasswing Firms, Study Finds\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Claude Mythos Doubled Bug Finds at Glasswing Firms - i10X News","description":"Firms with early Claude Mythos access more than doubled vulnerability disclosures vs. Chinese firms, fixed flaws as fast and saw no rise in exploited bugs.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study","og_locale":"en_US","og_type":"article","og_title":"Claude Mythos Doubled Bug Finds at Glasswing Firms - i10X News","og_description":"Firms with early Claude Mythos access more than doubled vulnerability disclosures vs. Chinese firms, fixed flaws as fast and saw no rise in exploited bugs.","og_url":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study","og_site_name":"i10X News","article_published_time":"2026-11-05T08:10:03+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/claude-mythos-glasswing-cyber-defense-study-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"Claude Mythos Doubled Bug Disclosures at Glasswing Firms, Study Finds","datePublished":"2026-11-05T08:10:03+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study"},"wordCount":1341,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/claude-mythos-glasswing-cyber-defense-study-title.webp","articleSection":["Security &amp; Defense","Society &amp; Economy","Studies"],"inLanguage":"en-US","dateModified":"2026-11-05T08:10:03+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study","url":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study","name":"Claude Mythos Doubled Bug Finds at Glasswing Firms - i10X News","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/claude-mythos-glasswing-cyber-defense-study-title.webp","datePublished":"2026-11-05T08:10:03+00:00","description":"Firms with early Claude Mythos access more than doubled vulnerability disclosures vs. Chinese firms, fixed flaws as fast and saw no rise in exploited bugs.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/claude-mythos-glasswing-cyber-defense-study-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/claude-mythos-glasswing-cyber-defense-study-title.webp","width":1344,"height":768,"caption":"Illustration: i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/claude-mythos-glasswing-cyber-defense-study#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"Claude Mythos Doubled Bug Disclosures at Glasswing Firms, Study Finds"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/6928","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=6928"}],"version-history":[{"count":1,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/6928\/revisions"}],"predecessor-version":[{"id":6929,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/6928\/revisions\/6929"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/6926"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=6928"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=6928"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=6928"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=6928"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=6928"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}