{"id":3411,"date":"2026-10-07T09:48:37","date_gmt":"2026-10-07T09:48:37","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3411"},"modified":"2026-10-07T09:48:37","modified_gmt":"2026-10-07T09:48:37","slug":"anthropic-expands-claude-access-for-vetted-cyber-teams-as-glasswing-finds-129000-flaws","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3411","title":{"rendered":"Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws"},"content":{"rendered":"<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">Oct 07, 2026<\/span><\/span><span class=\"p-tags\">Artificial Intelligence \/ Vulnerability<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEimg1tAvNh5aMWuNTZXjb4kKfxIQ0iWkuo2bCznozA8oz2Fm36WzbPnBI1bBDX5Mc3hpyOMIcjS_fcdYzzpQnrtUkex17u0_fn7r3bgcRYEN4o2hoGf4vlw5hQKEgcDd2VoVT2P9unKzsVOlly1QFlu6WfySqGPZ4Pf7xrZXaL4pEy1vrhWQBHR7SiqHHvf\/s1700-nu-rw-lo-l85-e365\/claude-flaws.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><\/a><\/div>\n<p>Anthropic on Tuesday said it&#8217;s expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026.<\/p>\n<p>The company said it also found an additional 5,500 verified software vulnerabilities between April and October 2026 through open-source scanning efforts.<\/p>\n<p>\u00abOf these verified vulnerabilities, more than 33,000 have so far been rated as critical- or high-severity,\u00bb Anthropic <a href=\"https:\/\/www.anthropic.com\/news\/cyber-verification-program\" target=\"_blank\">said<\/a>. \u00abThis is likely an undercount, as it is based on survey data from only a subset of Glasswing partners. As such, we expect the true impact to be at least five times higher.\u00bb<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/growth-ai-control-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjVYuoalvwUlwvLZFDideJ8jW4rz-IodX0Lwi7uyP7Ab0wiDeu_BqVhPDdejQQ65MC3p9Xc4MApnHz56NJ5SDc1HMg0DvozkkGYv9TGtDLCh26v1yD5-GyzQxnA5-6A6B4beW96H_6FyrByq22cvU5JDF-i8e5GIfV4wg1SpCvjwAJt74FaqkAb2gzqE7ll\/s728-nu-rw-lo-l85-e365\/core-d.png\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>The updated program, called the Cyber Verification Program (CVP), features three access tiers, allowing organizations and security teams to apply for one that best aligns with their work. Each tier comes with access to its models, including Claude Opus 5.5, Claude Sonnet 5.5, Claude Mythos 5.1, and new models moving forward.<\/p>\n<p><a name=\"more\"\/><\/p>\n<p>The three access levels are detailed below &#8211;<\/p>\n<ul>\n<li>Defense Access, which is for defensive work, such as incident response, malware reverse engineering, and vulnerability analysis and validation.<\/li>\n<li>Red Team Access, which adds authorized penetration testing and red-teaming to the defensive use cases.<\/li>\n<li>Specialized Access, which has the fewest safeguards and is reserved for a limited set of verified organizations that are authorized to test safety systems.<\/li>\n<\/ul>\n<p>According to a CyScenarioBench evaluation, its safeguards blocked 46 of 50 tasks on Claude Opus 5.5 in the Defense Access tier, while the Red Team Access tier on the same model did not block any tasks, and completed 34 of 50, which is the same completion rate as when no safeguards are applied. Without CVP access, every task was blocked on the first prompt.<\/p>\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhAr4sGpoRybI4spdAblZyi8gyIkWOPbF3dvazqDVAsRA1Ei0toNSSKv8Jj8cdLvq42HHYpgG6QmocQP0LCwssEEa8CMnISMZQdpQ2nhaF1TS8ou9G0x-ygunabs2kbs4QdyDMXKu835IPtC7D5VG-iHl-pSSiwpWlHR6l4FoN_WX6HS7CofPpuhanhlN7_\/s1700-nu-rw-lo-l85-e365\/cyber-claude.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhAr4sGpoRybI4spdAblZyi8gyIkWOPbF3dvazqDVAsRA1Ei0toNSSKv8Jj8cdLvq42HHYpgG6QmocQP0LCwssEEa8CMnISMZQdpQ2nhaF1TS8ou9G0x-ygunabs2kbs4QdyDMXKu835IPtC7D5VG-iHl-pSSiwpWlHR6l4FoN_WX6HS7CofPpuhanhlN7_\/s1700-nu-rw-lo-l85-e365\/cyber-claude.jpg\" alt=\"\" border=\"0\" data-original-height=\"2322\" data-original-width=\"1920\"\/><\/a><\/div>\n<p>\u00abThese evaluations give us confidence that we can make advanced cyber capabilities safely available to a broader set of defenders, expanding the defensive efforts we began with Project Glasswing,\u00bb Anthropic said.<\/p>\n<p>The AI company said it&#8217;s making these tools available to defenders given their dual-use nature, and to help them secure systems using the same capabilities that could be weaponized by a bad actor for malicious purposes.<\/p>\n<p>In an analysis published late last month, VulnCheck researcher Patrick Garrity <a href=\"https:\/\/github.com\/patrickmgarrity\/Anthropic-Credited-CVEs\" target=\"_blank\">revealed<\/a> that only 2 of the 300 vulnerabilities discovered by Anthropic or Project Glasswing, or 0.67%, have been exploited in the wild. Of these, 39 have been classified as critical, 141 as high, 81 as medium, and 18 as low in severity.<\/p>\n<p>The two vulnerabilities that have witnessed active exploitation efforts are CVE-2026-26980, an SQL injection flaw in Ghost CMS, and CVE-2026-61500, a session forgery flaw in Rejetto HTTP File Server.<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/network-defense-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjVV2rRkX8tRMF6gCzemvQNpwFwGxRWxY1cJEYfoLLSj1EZYJOlj5WTR77t0i6kELXujYcaHTpRDqTjCbVHH5Pnh7wzxUiKP5j4dsDkWIMlp2bmpZsL0jeAsA_19pHH5UPtyBvNkZdyGEULOAsXPcraMP5CYjQRFefhXRSdEjYkrdcpUnc4ILcvcdEfAauE\/s728-nu-rw-lo-l85-e365\/tl-d.jpg\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>If anything, the findings suggest that while AI is lowering the barrier to vulnerability discovery, not every security flaw it uncovers is necessarily exploitable by threat actors or capable of causing significant impacts. Moreover, as demonstrated by <a href=\"https:\/\/1password.com\/blog\/why-ai-generated-patches-still-require-human-review\" target=\"_blank\">1Password<\/a> and <a href=\"https:\/\/www.veracode.com\/blog\/2026-genai-code-security-report-ai-risk\/\" target=\"_blank\">Veracode<\/a>, AI-generated vulnerability patches can themselves introduce new security risks of their own.<\/p>\n<p>\u00abRoughly 44% of AI code generation tasks introduced a risky security vulnerability in tests,\u00bb Veracode said. \u00abThe average security pass rate across models is 56% \u2013 barely changed from <a href=\"https:\/\/www.veracode.com\/blog\/genai-code-security-report\/\" target=\"_blank\">55% in the first report<\/a>. In other words, security performance has stayed flat while the amount of AI-generated code entering pipelines has surged.\u00bb<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ue804Ravie Lakshmanan\ue802Oct 07, 2026Artificial Intelligence \/ Vulnerability Anthropic on Tuesday said it&#8217;s expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced&hellip;<\/p>\n","protected":false},"author":1,"featured_media":3412,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[130,105,9,233,206,509,11,1374,756,3680],"class_list":["post-3411","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-access","tag-anthropic","tag-claude","tag-cyber","tag-expands","tag-finds","tag-flaws","tag-glasswing","tag-teams","tag-vetted"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3411"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3411\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/3412"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}