A preprint found a roughly 120% relative increase in disclosures against a Chinese-firm comparison group, with no detectable slowdown in the repair channels studied.
Software-flaw disclosures at firms given early access to Anthropic's AI model Claude Mythos Preview rose by roughly 120% relative to the change at Chinese firms without access, a November 4 preprint finds. Measured repair times showed no detectable slowdown.
Thomas Mosk's study finds that AI-assisted bug hunting was associated with more public disclosures without a detectable slowdown in the repair channels studied. Its findings cover publicly disclosed vulnerabilities and specific repair channels, leaving undisclosed workloads and users' installation of patches unmeasured.
Anthropic announced Project Glasswing on April 7, giving selected firms access to the model. The main disclosure analysis compares 13 participants with 267 Chinese firms from October 2025 through September 2026. The Chinese firms could use other AI tools. Selection into Glasswing was not random, and national disclosure practices differ, limiting causal interpretation.
Alongside the 120% relative increase in disclosures, the paper estimates roughly 150% more high-impact disclosures. That category means an above-median impact component in the vulnerability severity score.
Earlier Epoch AI analysis, published July 2, documented a spike in high- and critical-severity disclosures after Mythos Preview. It also warned that public counts omit undisclosed discoveries and can reflect increased interest in bug hunting.
Mosk examines fixing capacity separately, comparing Glasswing vulnerabilities with other non-Chinese vulnerabilities in shorter samples. One analysis follows 658 flaws reported to vendors by the Zero Day Initiative through June 2026.
Source link
