Anthropic Expands Glasswing, Promises Mythos-class Public Release

Per Anthropic's June 2 blog post, Project Glasswing, the company's restricted cybersecurity program, is expanding by approximately 150 new organizations, bringing the roster to around 200 partners based in more than 15 countries. Anthropic said the new cohort covers sectors underrepresented at launch, including power, water, healthcare, communications, and hardware, and that many partners are vendors whose codebases other organizations and governments depend on. Anthropic added that partners have used Claude Mythos Preview to find more than 10,000 high- or critical-severity security flaws since the program began in early April with roughly 50 initial partners.

CNBC and TechCrunch report the broader group now includes Okta, Samsung, SK Hynix, SK Telecom, NATO, and the EU cybersecurity agency ENISA, alongside earlier partners such as Apple, Nvidia, Microsoft, CrowdStrike, and Palo Alto Networks. Each organization must meet Anthropic's security requirements before gaining access.

Reuters reported on May 28 that Anthropic aims to make Mythos-class models available to customers in the coming weeks, issued alongside the launch of Claude Opus 4.8. Per Reuters and TheNextWeb, Opus 4.8 ships at the same price as its predecessor and posts benchmark gains, with Anthropic emphasizing improved honesty - the model is described as more likely to flag uncertainty and less likely to make unsupported claims. Anthropic's own blog is more guarded on timing, stating that safely releasing Mythos-level capabilities in general access will require misuse safeguards that it and, to its knowledge, other developers have yet to develop.

The reported discovery of more than 10,000 serious flaws in a controlled cohort is a concrete data point on how quickly frontier models can surface vulnerabilities across large codebases. For defenders, wider Mythos access could accelerate scanning and patching; the same capabilities, released without safeguards, could lower the barrier for attackers. That dual-use tension is now driving public debate over release controls, disclosure timelines, and coordination with governments.

• •The timing and access conditions for any broader Mythos availability beyond Glasswing.
• •Whether partners publish remediation or coordinated-disclosure data following scans.
• •How national-security stakeholders respond, given partners now include NATO and ENISA.