VulnCheck reports Anthropic Glasswing findings lag fixes

Seven months into Anthropic's Project Glasswing, an analysis by VulnCheck reports that the initiative has tracked 442 CVEs—accounting for roughly 0.5% of this year's total—with only two identified as exploited in the wild. The author argues that the project has created a massive triage burden for open source maintainers, noting that thousands of findings are duplicates or withdrawals while fixes remain low and maintainers report high false-positive rates on unverified reports. Open article →