Glasswing logs 225 CVEs, one exploited

Anthropic’s Project Glasswing has been credited with 225 CVEs, but only one is confirmed exploited in the wild, according to The Register’s review of the Glasswing tracker. The ratio matters more than the headline count: discovery is accelerating, while triage, patching, and deployment still depend on people. Teams evaluating AI security tooling should measure remediation throughput and exploit evidence—not equate more findings with more attacker impact—alongside Anthropic Mythos’s earlier cybersecurity step change.