Project Glasswing: Anthropic Deploys Claude Mythos to Find Zero-Days in Every Major OS and Browser — With Apple, Microsoft, Google, and 9 More Partners

On April 7, 2026, Anthropic officially previewed Claude Mythos — the model leaked in March — through Project Glasswing, a cybersecurity initiative pairing the unreleased frontier model with 12 founding partners including Apple, Microsoft, Google, Amazon, Nvidia, CrowdStrike, and the Linux Foundation. Mythos has already identified thousands of zero-day vulnerabilities in every major operating system and browser, including a 27-year-old OpenBSD TCP crash bug and a 16-year-old FFmpeg flaw that fuzzers hit five million times without catching. The model chains 4-5 vulnerabilities together to build full exploits — including Linux kernel root escalation and browser sandbox escapes. Anthropic is committing $100M in usage credits and $4M in open-source donations. The model will not be released publicly. Security researcher Nicholas Carlini says he's 'found more bugs in the last couple of weeks than in the rest of my life combined.'