rapid-weaponizationai-platform-securitywidely-deployed-product-advisory

Frontier AI Vulnerability Hunts Drive Surge in Critical Flaw Discoveries

Emerging Technology Risk · 3 sources · Updated 2mo ago · First seen Sep 7, 2026

AI-assisted vulnerability research is contributing to a sharp rise in disclosed high- and critical-severity software flaws, with monthly totals reportedly climbing from fewer than 100 to more than 600. Anthropic's Project Glasswing reportedly identified over 10,000 high- or critical-severity issues, while exploitation of disclosed vulnerabilities is increasingly occurring on the day of disclosure or earlier, making patch cycles measured in weeks inadequate.

Okta used pre-release OpenAI and Anthropic frontier models through the Daybreak Cyber Partner Program and Project Glasswing to scan high-priority customer-installed software across hundreds of repositories. Its testing found that autonomous agents frequently generated false positives or overstated severity, while expert-led investigation, manual reproduction, and triage substantially improved results. VMware similarly prioritized fixes found after adopting Claude Mythos and Project Glasswing, releasing VCF 9.1.1 as a security-focused update and delaying planned VCF 9.2 features.

New surface, new adversariesTrack how attackers are adapting to this technology.

Track this risk

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

7 events · Jun 2025 – Jul 2026

Reported Sep 8, 20262mo ago
Okta conducts AI-assisted vulnerability hunting across its products
Okta used OpenAI's GPT 5.5 Cyber Preview and Anthropic's Mythos Preview through the Daybreak Cyber Partner Program and Project Glasswing to scan hundreds of repositories and millions of lines of code. Human Product Security engineers triaged, reproduced, and reported potential vulnerabilities, finding that expert-guided investigations improved results over autonomous scanning.
Hunting Vulnerabilities Using Frontier Models | Okta Security
Reported Sep 7, 20262mo ago
Anthropic Project Glasswing reportedly finds over 10,000 flaws
Anthropic's AI-powered Project Glasswing vulnerability-discovery effort reportedly surfaced more than 10,000 high- or critical-severity vulnerabilities, many of which had not yet been individually disclosed.
Critical Software Vulnerabilities Surge From Under 100 to More Than 600 a Month
Jul 2026
Severe vulnerability disclosures reach roughly 2,500
Reported high- and critical-severity vulnerability disclosures reached roughly 2,500 in July, nearly five times the pre-Mythos baseline and 60% above the June total.
Critical Software Vulnerabilities Surge From Under 100 to More Than 600 a Month
Jun 2026
Technology firms disclose about 1,500 severe CVEs
By June, 21 named technology organizations, including Microsoft, Google, Apple, Adobe, Oracle, Cisco, and IBM, had disclosed approximately 1,500 high- and critical-severity CVEs. The reported total was more than 3.5 times the previous monthly record.
Critical Software Vulnerabilities Surge From Under 100 to More Than 600 a Month
2026
High- and critical-severity disclosures begin rising sharply
Epoch AI data indicated that public disclosures of high- and critical-severity vulnerabilities by major technology companies began increasing sharply in spring 2026, rising from a baseline of a few hundred per month toward more than 600.
Critical Software Vulnerabilities Surge From Under 100 to More Than 600 a Month
Reported Oct 30, 20251y ago
VMware releases security-focused VCF 9.1.1
VMware made Cloud Foundation 9.1.1 generally available, consolidating security patches associated with vulnerabilities identified through Anthropic Claude Mythos and Project Glasswing. Broadcom deferred planned VCF 9.2 feature work to prioritize remediation.
VMware VCF 9.1.1 heavy on Mythos-linked security, anchors altered release plans - SDxCentral
Jun 2025
VMware unveils Cloud Foundation 9.0
VMware unveiled the major Cloud Foundation 9.0 release.
VMware VCF 9.1.1 heavy on Mythos-linked security, anchors altered release plans - SDxCentral

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Affected products

1 linked

Vmware Cloud Foundation

Organizations

3 linked

OktaAnthropicVMware

Do you run this?Follow how adversaries are adapting to this technology, and where it touches your stack today.

Track This Risk

Source coverage

Sources

3 references tracked. Mallory keeps watching after this page renders.

Okta Security BlogNews · Sep 8, 2026

Hunting Vulnerabilities Using Frontier Models | Okta SecurityOpen source ↗

Cyber Security NewsNews · Sep 7, 2026

Critical Software Vulnerabilities Surge From Under 100 to More Than 600 a MonthOpen source ↗

Sdxcentral CybersecurityNews · Oct 30, 2025

VMware VCF 9.1.1 heavy on Mythos-linked security, anchors altered release plans - SDxCentralOpen source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Frontier AI Vulnerability Hunts Drive Surge in Critical Flaw Discoveries

How this story unfolded

Okta conducts AI-assisted vulnerability hunting across its products

Anthropic Project Glasswing reportedly finds over 10,000 flaws

Severe vulnerability disclosures reach roughly 2,500

Technology firms disclose about 1,500 severe CVEs

High- and critical-severity disclosures begin rising sharply

VMware releases security-focused VCF 9.1.1

VMware unveils Cloud Foundation 9.0

Related entities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Anthropic Glasswing Exposes AI Vulnerability Discovery-to-Remediation Gap

AI-Driven Vulnerability Discovery Fuels Fears of a Cyber 'Patch Wall'

Anthropic Restricts Mythos AI After It Finds and Exploits Thousands of Software Flaws

Frontier AI Vulnerability Hunts Drive Surge in Critical Flaw Discoveries

How this story unfolded

Okta conducts AI-assisted vulnerability hunting across its products

Anthropic Project Glasswing reportedly finds over 10,000 flaws

Severe vulnerability disclosures reach roughly 2,500

Technology firms disclose about 1,500 severe CVEs

High- and critical-severity disclosures begin rising sharply

VMware releases security-focused VCF 9.1.1

VMware unveils Cloud Foundation 9.0

Related entities

Affected products

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Anthropic Glasswing Exposes AI Vulnerability Discovery-to-Remediation Gap

AI-Driven Vulnerability Discovery Fuels Fears of a Cyber 'Patch Wall'

Anthropic Restricts Mythos AI After It Finds and Exploits Thousands of Software Flaws