About

Skadden podcast discusses Anthropic’s Mythos, Project Glasswing, and UK cyber policy

Published
Score
14

Why it matters

Skadden's Decrypted podcast released an episode examining Anthropic's Claude Mythos Preview and Project Glasswing—AI tools designed to accelerate vulnerability discovery and compress the timeline for patching and disclosure. Hosts David Simon and William Ridgway interviewed Nicola Kerr-Shaw on the practical implications for cybersecurity teams, incident response, board governance, and litigation risk. Anthropic announced that Mythos Preview identified thousands of high-severity vulnerabilities, including flaws that survived decades of human review and millions of automated tests. Project Glasswing will grant defensive-security access to a consortium including AWS, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorgan Chase, the Linux Foundation, Microsoft, NVIDIA, and Palo Alto Networks. Red Hat announced the model and initiative on April 7, 2026, and reported no confirmed significant vulnerabilities in its own environment to date.

The full scope of vulnerabilities identified by Mythos Preview remains unclear, as does the timeline for Project Glasswing's rollout to consortium members and the specific protocols governing disclosure and remediation.

The episode reflects a broader industry reckoning: AI systems capable of autonomous vulnerability discovery will compress organizational response windows and force legal and compliance teams to recalibrate assumptions about patch timelines, disclosure obligations, and liability exposure. Attorneys managing cybersecurity governance, incident response protocols, and regulatory compliance should monitor how Project Glasswing participants implement vulnerability management workflows and whether new disclosure standards emerge from the consortium's work.

mail Subscribe to Law And Technology email updates

Primary sources. No fluff. Straight to your inbox.

Also on LawSnap