Originally published on AI Tech Connect.
The headline number that should reorganise your security budget On 26 May 2026 Anthropic published its first proper update on Project Glasswing, the open-source security initiative it announced earlier this month with roughly 50 partner organisations including AWS, Apple, Cisco, Google, JPMorgan Chase and Microsoft. The number the press has rightly latched onto is large: 23,019 vulnerabilities flagged across more than 1,000 open-source projects scanned by Claude Mythos Preview, of which an estimated 6,202 are high or critical severity. That is not the most important number in the update. The most important number is . That is the share of those vulnerabilities that have actually been patched. Read that sentence twice. The bottleneck in open-source security has now visibly moved from…
