Checking in on Anthropic’s much-vaunted Project Glasswing, it turns out that LLMs are not actually that good at finding vulnerabilities in software but authoritarian leaders are
www.vulncheck.com/blog/anthrop...
www.vulncheck.com/blog/anthrop...
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthr...
www.vulncheck.com
November 14, 2026 at 1:50 PM
Checking in on Anthropic’s much-vaunted Project Glasswing, it turns out that LLMs are not actually that good at finding vulnerabilities in software but authoritarian leaders are
www.vulncheck.com/blog/anthrop...
www.vulncheck.com/blog/anthrop...
Vulnerability management VulnCheck says more than 100,000 CVEs have now been assigned this year, more than double the 2025 total of roughly 48,000
www.linkedin.com/feed/update/...
www.linkedin.com/feed/update/...
November 15, 2026 at 11:06 AM
Vulnerability management VulnCheck says more than 100,000 CVEs have now been assigned this year, more than double the 2025 total of roughly 48,000
www.linkedin.com/feed/update/...
www.linkedin.com/feed/update/...
Really interesting reporting from Patrick Garrity at @vulncheck.bsky.social
While I don’t discount that AI models are good at finding vulnerabilities, their success seems to be overstated while making A LOT more work for already overwhelmed development teams.
While I don’t discount that AI models are good at finding vulnerabilities, their success seems to be overstated while making A LOT more work for already overwhelmed development teams.
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthr...
www.vulncheck.com
November 12, 2026 at 2:04 PM
Really interesting reporting from Patrick Garrity at @vulncheck.bsky.social
While I don’t discount that AI models are good at finding vulnerabilities, their success seems to be overstated while making A LOT more work for already overwhelmed development teams.
While I don’t discount that AI models are good at finding vulnerabilities, their success seems to be overstated while making A LOT more work for already overwhelmed development teams.
Glasswing nach sieben Monaten: VulnCheck sieht überlastete Maintainer, Anthropics Dashboard erzählt eine andere Geschichte. Ein Abgleich der Zahlen: https://kiberblick.de/aktuell/2026/2026-11-11-glasswing-bilanz-vulncheck/
Glasswing: 38.000 Funde, wie viele zählen? - KIberblick
VulnCheck rechnet Anthropics Schwachstellen-Bilanz nach und sieht überlastete Maintainer. Anthropics eigene Zahlen erzählen eine andere Geschichte.
kiberblick.de
November 12, 2026 at 9:02 AM
Glasswing nach sieben Monaten: VulnCheck sieht überlastete Maintainer, Anthropics Dashboard erzählt eine andere Geschichte. Ein Abgleich der Zahlen: https://kiberblick.de/aktuell/2026/2026-11-11-glasswing-bilanz-vulncheck/
"But seven months in, the evidence still doesn't match the [Glasswing] launch narrative. The CVEs are a sliver of this year's total, almost none are being exploited, fixes have stalled while duplicates and withdrawals pile up, and the triage burden is shifting onto the open source maintainers ..."
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthr...
www.vulncheck.com
November 11, 2026 at 3:01 AM
"But seven months in, the evidence still doesn't match the [Glasswing] launch narrative. The CVEs are a sliver of this year's total, almost none are being exploited, fixes have stalled while duplicates and withdrawals pile up, and the triage burden is shifting onto the open source maintainers ..."
Who could have predicted this
https://www.vulncheck.com/blog/anthropic-glasswing-november-update
https://www.vulncheck.com/blog/anthropic-glasswing-november-update
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthropic’s 37,966 reported findings, only 7,349 (19.4%) have been made public and just 217 have been marked fixed.
www.vulncheck.com
November 11, 2026 at 5:53 AM
Who could have predicted this
https://www.vulncheck.com/blog/anthropic-glasswing-november-update
https://www.vulncheck.com/blog/anthropic-glasswing-november-update
Researchers continue to find serious vulnerabilities in internet connected refrigerators
cyberscoop.com/copeland-dix...
#Kyberturvallisuus #ThreatIntel #Haavoittuvuus
cyberscoop.com/copeland-dix...
#Kyberturvallisuus #ThreatIntel #Haavoittuvuus
Researchers continue to find serious vulnerabilities in internet connected refrigerators
VulnCheck disclosed 14 severe vulnerabilities in Copeland and Dixell XWEB EVO refrigeration controllers, with at least two under active exploitation.
cyberscoop.com
November 13, 2026 at 9:40 PM
Researchers continue to find serious vulnerabilities in internet connected refrigerators
cyberscoop.com/copeland-dix...
#Kyberturvallisuus #ThreatIntel #Haavoittuvuus
cyberscoop.com/copeland-dix...
#Kyberturvallisuus #ThreatIntel #Haavoittuvuus
VulnCheck disclosed 14 vulnerabilities in Dixell refrigeration units that give an attacker root access, while online honeypots are being flooded with hacks and malicious probes.
Read more: cyberscoop.com/copeland-dix...
Read more: cyberscoop.com/copeland-dix...
November 14, 2026 at 1:47 AM
VulnCheck disclosed 14 vulnerabilities in Dixell refrigeration units that give an attacker root access, while online honeypots are being flooded with hacks and malicious probes.
Read more: cyberscoop.com/copeland-dix...
Read more: cyberscoop.com/copeland-dix...
VulnCheck telt dit jaar meer dan 100.000 CVE-registraties
Volgens beveiligingsbedrijf VulnCheck is in 2026 de grens van 100.000 geregistreerde kwetsbaarheden met een CVE-nummer gepasseerd. Dat is meer dan twee keer het aantal over heel 2025, schrijf…
Lees op techspeeltuin.nl
#technieuws #Security
Volgens beveiligingsbedrijf VulnCheck is in 2026 de grens van 100.000 geregistreerde kwetsbaarheden met een CVE-nummer gepasseerd. Dat is meer dan twee keer het aantal over heel 2025, schrijf…
Lees op techspeeltuin.nl
#technieuws #Security
VulnCheck telt dit jaar meer dan 100.000 CVE-registraties
Volgens beveiligingsbedrijf VulnCheck is in 2026 de grens van 100.000 geregistreerde kwetsbaarheden met een CVE-nummer gepasseerd. Dat is meer dan twee keer het aantal over heel 2025, schrijft Tweakers.
techspeeltuin.nl
November 14, 2026 at 11:54 AM
VulnCheck telt dit jaar meer dan 100.000 CVE-registraties
Volgens beveiligingsbedrijf VulnCheck is in 2026 de grens van 100.000 geregistreerde kwetsbaarheden met een CVE-nummer gepasseerd. Dat is meer dan twee keer het aantal over heel 2025, schrijf…
Lees op techspeeltuin.nl
#technieuws #Security
Volgens beveiligingsbedrijf VulnCheck is in 2026 de grens van 100.000 geregistreerde kwetsbaarheden met een CVE-nummer gepasseerd. Dat is meer dan twee keer het aantal over heel 2025, schrijf…
Lees op techspeeltuin.nl
#technieuws #Security
[LWN.net] Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)
#Linux #OpenSource
#Linux #OpenSource
Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)
Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings…
www.linuxnews.net
November 12, 2026 at 5:00 PM
[LWN.net] Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)
#Linux #OpenSource
#Linux #OpenSource
"curl took a bold move by deciding to publish low and medium vulnerabilities findings publicly as issues for full transparency and we encourage other open source maintainers to follow their lead."
🪅
https://www.vulncheck.com/blog/anthropic-glasswing-november-update
🪅
https://www.vulncheck.com/blog/anthropic-glasswing-november-update
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthropic’s 37,966 reported findings, only 7,349 (19.4%) have been made public and just 217 have been marked fixed.
www.vulncheck.com
November 9, 2026 at 10:34 PM
"curl took a bold move by deciding to publish low and medium vulnerabilities findings publicly as issues for full transparency and we encourage other open source maintainers to follow their lead."
🪅
https://www.vulncheck.com/blog/anthropic-glasswing-november-update
🪅
https://www.vulncheck.com/blog/anthropic-glasswing-november-update
Researchers continue to find serious vulnerabilities in internet connected refrigerators
Researchers continue to find serious vulnerabilities in internet connected refrigerators
VulnCheck disclosed 14 severe vulnerabilities in Copeland and Dixell XWEB EVO refrigeration controllers, with at least two under active exploitation.
cyberscoop.com
November 13, 2026 at 10:02 PM
Researchers continue to find serious vulnerabilities in internet connected refrigerators
📰 **Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)**
Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings ...
📰 Source […]
Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings ...
📰 Source […]
Original post on igeek.gamer-geek-news.com
igeek.gamer-geek-news.com
November 14, 2026 at 4:48 PM
📰 **Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)**
Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings ...
📰 Source […]
Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings ...
📰 Source […]
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck www.vulncheck.com/blog/anthrop...
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of…
www.vulncheck.com
November 12, 2026 at 3:22 PM
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck www.vulncheck.com/blog/anthrop...
🐧 **Patrick Garrity of VulnCheck Shows Slop Companies Find Many False Positives or False Alarm 'Bugs'**
plus more
📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/11/14/Patrick_Garrity_of_VulnCheck_Shows_Slop_Companies_Find_Many_Fal.shtml
plus more
📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/11/14/Patrick_Garrity_of_VulnCheck_Shows_Slop_Companies_Find_Many_Fal.shtml
Tux Machines — Patrick Garrity of VulnCheck Shows Slop Companies Find Many False Positives or False Alarm 'Bugs'
news.tuxmachines.org
November 14, 2026 at 2:30 AM
🐧 **Patrick Garrity of VulnCheck Shows Slop Companies Find Many False Positives or False Alarm 'Bugs'**
plus more
📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/11/14/Patrick_Garrity_of_VulnCheck_Shows_Slop_Companies_Find_Many_Fal.shtml
plus more
📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/11/14/Patrick_Garrity_of_VulnCheck_Shows_Slop_Companies_Find_Many_Fal.shtml
Tracking Anthropic-discovered vulnerabilities
View Article | Discussion + AI Summary
Summary of HN discussion 🧵👇
View Article | Discussion + AI Summary
Summary of HN discussion 🧵👇
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthropic’s 37,966 reported findings, only 7,349 (19.4%) have been made public and just 217 have been marked fixed.
www.vulncheck.com
November 11, 2026 at 8:00 AM
Tracking Anthropic-discovered vulnerabilities
View Article | Discussion + AI Summary
Summary of HN discussion 🧵👇
View Article | Discussion + AI Summary
Summary of HN discussion 🧵👇
📰 **Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)**
Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings ...
📰 Source […]
Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings ...
📰 Source […]
Original post on igeek.gamer-geek-news.com
igeek.gamer-geek-news.com
November 12, 2026 at 4:35 PM
📰 **Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)**
Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings ...
📰 Source […]
Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings ...
📰 Source […]
After 7 Months, Glasswing Overwelms Maintainers with Underwhelming Findings | Discussion
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthropic’s 37,966 reported findings, only 7,349 (19.4%) have been made public and just 217 have been marked fixed.
www.vulncheck.com
November 10, 2026 at 11:00 PM
After 7 Months, Glasswing Overwelms Maintainers with Underwhelming Findings | Discussion
VulnCheck: After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings www.vulncheck.com/blog/anthrop...
Anthropic finds a lot of security vulnerabilities and most of them aren‘t vulnerabilities at all. Some are low and only very few are medium or higher.
Anthropic finds a lot of security vulnerabilities and most of them aren‘t vulnerabilities at all. Some are low and only very few are medium or higher.
November 11, 2026 at 1:07 PM
VulnCheck: After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings www.vulncheck.com/blog/anthrop...
Anthropic finds a lot of security vulnerabilities and most of them aren‘t vulnerabilities at all. Some are low and only very few are medium or higher.
Anthropic finds a lot of security vulnerabilities and most of them aren‘t vulnerabilities at all. Some are low and only very few are medium or higher.
Er zijn in 2026 al meer dan 100.000 bugs geregistreerd met een CVE-nummer, stelt securitybedrijf VulnCheck. Dat zijn er meer dan twee keer zoveel als in heel 2025. Dat komt voornamelijk door kunstmatige intelligentie, die in rap tempo nieuwe kwetsbaarheden vindt.
In 2026 werden al meer dan twee keer zoveel CVE-bugs geregistreerd als in 2025
ebx.sh
November 14, 2026 at 11:39 AM
Er zijn in 2026 al meer dan 100.000 bugs geregistreerd met een CVE-nummer, stelt securitybedrijf VulnCheck. Dat zijn er meer dan twee keer zoveel als in heel 2025. Dat komt voornamelijk door kunstmatige intelligentie, die in rap tempo nieuwe kwetsbaarheden vindt.
After 7 Months, Glasswing Overwelms Maintainers with Underwhelming Findings https://www.vulncheck.com/blog/anthropic-glasswing-november-update (https://news.ycombinator.com/item?id=50447074)
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthropic’s 37,966 reported findings, only 7,349 (19.4%) have been made public and just 217 have been marked fixed.
www.vulncheck.com
November 10, 2026 at 11:36 PM
After 7 Months, Glasswing Overwelms Maintainers with Underwhelming Findings https://www.vulncheck.com/blog/anthropic-glasswing-november-update (https://news.ycombinator.com/item?id=50447074)
Talk Around Town: VulnCheck Says Anthropic's Glasswing Is Finding Bugs But Fixing Mighty Few
Talk Around Town: VulnCheck Says Anthropic's Glasswing Is Finding Bugs But Fixing Mighty Few
One analyst's seven-month count finds 442 CVEs, only two exploited, and curl's maintainer grumbling about unreviewed AI triage dumps.
thetechholler.com
November 11, 2026 at 2:07 PM
Talk Around Town: VulnCheck Says Anthropic's Glasswing Is Finding Bugs But Fixing Mighty Few
Commenters also took aim at the article itself. Several pointed out it read suspiciously like marketing for VulnCheck, a company that sells vulnerability prioritization. When the critic is selling the filter, people questioned the benchmarks used to grade Glasswing. #infosec 3/4
November 11, 2026 at 8:00 AM
Commenters also took aim at the article itself. Several pointed out it read suspiciously like marketing for VulnCheck, a company that sells vulnerability prioritization. When the critic is selling the filter, people questioned the benchmarks used to grade Glasswing. #infosec 3/4
VulnCheck says Anthropic's Glasswing ledger shows 217 fixes among 37,966 findings. Anthropic's dashboard counts 629 patched upstream, with a 94.2% true positive rate over 6,376 reviewed findings, duplicates included.
www.vulncheck.com/blog/anthrop...
www.vulncheck.com/blog/anthrop...
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog | VulnCheck
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthr...
www.vulncheck.com
November 11, 2026 at 3:17 AM
VulnCheck says Anthropic's Glasswing ledger shows 217 fixes among 37,966 findings. Anthropic's dashboard counts 629 patched upstream, with a 94.2% true positive rate over 6,376 reviewed findings, duplicates included.
www.vulncheck.com/blog/anthrop...
www.vulncheck.com/blog/anthrop...
Researchers continue to find serious vulnerabilities in internet connected refrigerators
VulnCheck has disclosed 14 vulnerabilities in Copeland Dixell refrigeration units that can give an attacker root access. CyberScoop... https://threatintel.cc/2026/11/14/researchers-continue-to-find-serious.html
VulnCheck has disclosed 14 vulnerabilities in Copeland Dixell refrigeration units that can give an attacker root access. CyberScoop... https://threatintel.cc/2026/11/14/researchers-continue-to-find-serious.html
November 14, 2026 at 10:01 AM
Researchers continue to find serious vulnerabilities in internet connected refrigerators
VulnCheck has disclosed 14 vulnerabilities in Copeland Dixell refrigeration units that can give an attacker root access. CyberScoop... https://threatintel.cc/2026/11/14/researchers-continue-to-find-serious.html
VulnCheck has disclosed 14 vulnerabilities in Copeland Dixell refrigeration units that can give an attacker root access. CyberScoop... https://threatintel.cc/2026/11/14/researchers-continue-to-find-serious.html