Vulnerability

• Anthropic announced Claude Mythos, a new AI model able to detect zero-day vulnerabilities in code that developers have not identified. • The company deemed Mythos too dangerous for public release, sparking debates on its potential to cause 'bugmageddon' or internet collapse. • Through Project Glasswing, Anthropic shares Mythos Preview with 48 organizations including big tech firms and banks to patch critical flaws preemptively.

• Cogent Security, a vulnerability management developer, secured $42 million in Series A funding in February 2026 at a post-money valuation of $295 million. • Bain Capital Ventures led the round with participation from OpenAI, Datadog, and existing investor Greylock Partners, bringing the company's total capital raised to $53 million since its seed round. • The investment reflects growing enterprise demand for AI-powered vulnerability management tools as organizations prioritize cybersecurity infrastructure upgrades.

• Indian cybersecurity companies are deploying in-house AI agents built on large language models to combat threats. • These AI agents reduce software vulnerability detection and remediation times from days to hours. • The acceleration matches attackers' machine-speed operations, where human response windows shrink to near zero.

• Anthropic launched Claude Mythos Preview on April 7, 2026, an advanced AI model designed for defensive cybersecurity that uncovered thousands of major vulnerabilities in every major operating system and web browser. • Through Project Glasswing, access granted to tech giants including Amazon, Microsoft, Nvidia, Apple, and over 40 organizations maintaining critical software infrastructure. • Rising concerns from experts and governments about misuse risks to economies, public safety, and national security; US software stocks tumbled on April 9 amid fears of AI disruption to traditional security firms.

• Palo Alto Networks issued emergency patches on April 20, 2026, for a zero-day flaw (CVE-2026-4123) in PAN-OS firewalls, exploited against 50+ US healthcare providers. • Attackers gained root access via malicious updates, potentially exposing patient data of millions. • CISA added the vuln to KEV catalog, urging immediate updates; no ransomware deployed yet.

• Anthropic launched Project Glasswing, collaborating with Apple, Google, and Microsoft to deploy Claude Mythos Preview in identifying and patching critical software vulnerabilities preemptively. • The initiative unites rivals to leverage AI against cyber threats targeting US software infrastructure. • By fixing flaws before exploitation, the project aims to bolster national cybersecurity amid escalating AI-driven attacks.