A recent analysis of Anthropic's Project Glasswing reveals that after seven months, the initiative has identified 442 CVEs, representing only about 0.5% of all CVEs published this year. Of these, a mere two have been exploited in the wild, and only 217 of Anthropic's reported findings have been publicly disclosed and marked as fixed. The project's true positive rate is also under scrutiny, with external audits showing a significant discrepancy between reported and validated vulnerabilities. AI
IMPACT Questions the effectiveness of AI-driven vulnerability discovery and disclosure processes.
RANK_REASON Analysis of a project's findings and performance.
Read on HN — anthropic stories →
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →