Anthropic's latest AI model can autonomously find thousands of zero-day vulnerabilities, and the global scramble to match it is already underway
An AI model that can independently discover thousands of software vulnerabilities, some hidden for decades, across major operating systems and web browsers. That’s not the plot of a Netflix thriller. It’s what Anthropic shipped on April 7, 2026, when it unveiled Claude Mythos Preview.
The model’s autonomous cybersecurity capabilities are significant enough that Anthropic immediately restricted access through a new initiative called Project Glasswing, limiting availability to select organizations. No plans for a public commercial release have been disclosed.
What Mythos actually does #
Mythos can scan across a variety of major operating systems, web browsers, and other software to identify these hidden flaws. Some of the vulnerabilities it surfaced date back decades, meaning they’ve been quietly sitting in code that billions of people use every day.
That duality is precisely why Anthropic built Project Glasswing as a gatekeeper. The company has prioritized defensive applications, essentially positioning itself as the responsible steward of a technology that could just as easily be weaponized.
The competition is already here #
Anthropic didn’t get to sit alone on this mountaintop for long. OpenAI responded with GPT-5.4-Cyber/Daybreak, a model specifically designed to compete in the AI-driven cybersecurity space.
More notably, Chinese AI models have entered the ring. Zhipu AI’s Z.ai reportedly matches Mythos in cybersecurity effectiveness as of late June 2026. That timeline, roughly three months from Anthropic’s announcement to a comparable Chinese competitor, illustrates how compressed the innovation cycle has become.
Why this matters for investors and the broader market #
For crypto markets specifically, the implications are worth watching closely. Blockchain networks, DeFi protocols, and smart contract platforms all depend on the assumption that their underlying code is secure. An AI that can autonomously discover zero-day vulnerabilities could surface flaws in smart contracts, bridge protocols, or consensus mechanisms that auditors have missed for years. Anthropic’s decision to restrict access and focus on defense suggests the company believes the risk of proliferation is real and immediate. The fact that comparable capabilities emerged in China within three months suggests that restriction alone won’t be sufficient.
Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our