Vulnerabilities

• UN International Maritime Organization Secretary-General Arsenio Dominguez stated that the blockading of ships in the Strait of Hormuz due to the US-Iran conflict has turned international shipping and seafarers into leverage in geopolitical disputes. • The crisis highlights how vessels and crews, not involved in the conflict, are being caught up in hostilities between the United States and Iran, disrupting global trade routes. • This development underscores critical weaknesses in global shipping networks, potentially leading to supply chain disruptions, higher costs, and risks to maritime security worldwide.

• Cybersecurity researchers warn that Mythos AI can autonomously identify vulnerabilities and plan multi-step attack chains without human intervention. • The system uncovered a previously unknown 16-year-old FFmpeg bug, demonstrating its capability to discover longstanding security flaws across legacy software. • The discovery highlights growing concerns about autonomous AI agents executing complex security tasks, raising new governance and control questions for enterprise deployments.

• Anthropic launched Claude Mythos, a cybersecurity AI model that has discovered thousands of zero-day bugs, enhancing defenses against exploits. • The preview version identifies vulnerabilities in open-source projects and will soon charge for detailed release information to clients. • While boosting cybersecurity, the tool raises concerns over potential misuse by threat actors to weaponize the findings.

• Anthropic announced Project Glasswing, a cybersecurity initiative bringing together AWS, Apple, Broadcom, Cisco, CrowdStrike, Google, Microsoft, Nvidia, and Palo Alto Networks to identify and fix software vulnerabilities using its Claude Mythos Preview model. • The Claude Mythos Preview model achieves 93.9% accuracy on SWE-bench Verified, significantly outperforming Opus 4.6's 80.8%, and demonstrated the ability to find thousands of hidden bugs in critical systems. • Anthropic is committing up to $100 million in usage credits for Project Glasswing, plus $4 million in direct donations to open-source security organizations to strengthen cybersecurity infrastructure.