VentureBeat reviewed Anthropic’s vulnerability-disclosure dashboard and the Cyber Mission it announced on October 8, reporting that Anthropic models logged 29,439 findings between November 1, 2025 and October 2, 2026, of which 6,157 across 591 open-source projects were reported to maintainers and only 516 were patched upstream to Anthropic’s knowledge, with no guarantee those patches were widely installed. Outside security firms reviewed 6,123 findings and confirmed 5,674 valid, while 4,824 of the reported findings went directly to maintainers and may include false positives; the Critical Infrastructure Defense Program’s 11 partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC and Rockwell Automation. Anthropic did not say whether partners get free model access or who covers compute costs, and the piece notes fixes from its Glasswing work often take months and, in rare operational-technology cases, could take decades.
Anthropic's first Cyber Mission tally: 6,157 findings reported to maintainers, 516 patched
VentureBeat reviewed Anthropic's vulnerability-disclosure dashboard and the Cyber Mission it announced on October 8, reporting that Anthropic models logged 29,439 findings between November 1, 2025 and October 2, 2026, of which 6,157 across 591 open-source projects were reported to maintainers and only 516 were patched upstream to Anthropic's knowledge, with no guarantee those patches were widely installed. Outside security firms reviewed 6,123 findings and confirmed 5,674 valid, while 4,824 of the reported findings went directly to maintainers and may include false positives; the Critical Infrastructure Defense Program's 11 partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC and Rockwell Automation. Anthropic did not say whether partners get free model access or who covers compute costs, and the piece notes fixes from its Glasswing work often take months and, in rare operational-technology cases, could take decades.
Source: Venturebeat