Exploited in the Wild

VulnCheck's seven-month audit of Anthropic's Project Glasswing shows 37,966 reported findings, yet only 19.4% were made public and just 217 marked fixed; 442 received CVE IDs and only two were exploited in the wild. Discovery is far outpacing remediation, with nearly 12,000 new findings but only 15 additional fixes since September, exposing a widening gap between AI-driven vulnerability discovery and maintainer capacity.