Anthropic Expands Project Glasswing to Include Critical Infrastructure Organizations
Quick Look
- Anthropic is expanding Project Glasswing, its initiative to preview its Claude Mythos AI model for cybersecurity, to 150 new organizations.
- The new cohort includes critical infrastructure sectors like power, water, and healthcare, aiming to assess the AI's potential in identifying and exploiting software vulnerabilities.
AI-generated summary
Why It Matters
Anthropic initially launched Project Glasswing in early April to provide select organizations with access to its new frontier model, Claude Mythos, for cybersecurity research. The initiative was formed due to the model's observed capabilities in finding and exploiting software vulnerabilities.
When Anthropic announced Claude Mythos at the start of April, the company didn't release the new frontier model to the public. Instead, it a made a preview available to select organizations through an effort it called Project Glasswing. "We formed Project Glasswing because of capabilities we've observed in a new frontier model trained by Anthropic that we believe could reshape cybersecurity," the company wrote at the time. "AI models have reached a level of coding capability where they can surpass all but the most skilled humans at finding and exploiting software vulnerabilities."
Anthropic announced Project Glasswing alongside nearly 50 partners, including Apple, Amazon, Broadcom, CrowdStrike, Microsoft and NVIDIA. Today, the company is inviting another 150 organizations to the effort. Anthropic says the invitees are based in more than 15 countries and hail from industries that weren't well-represented in Glasswing's original cohort. Think: public utilities like power, water and telecom companies, as well as healthcare providers. Each organization will need to pass Anthropic's security requirements before they're granted access to Claude Mythos.
"What each partner has in common is that a successful attack on their codebase could be catastrophic," the company notes. "For most partners, we estimate that a major attack could affect more than 100 million people, with important ramifications for both global and national security."
What to Watch
AI outlook — possibilities, not facts
More organizations, particularly those in critical infrastructure, will seek access to advanced AI models for cybersecurity.
Very likely · Within months
Increased scrutiny and potential regulation regarding the development and deployment of AI models capable of exploiting software vulnerabilities.
Likely · Within months
Open Questions
- What specific security requirements must organizations pass to gain access?
- What are the potential risks and benefits of AI models surpassing human capabilities in cybersecurity?
- How will the findings from Project Glasswing be shared or implemented?
- What are the ethical considerations surrounding AI's role in cybersecurity vulnerability research?
