Threat reportVulnerabilityTL-2026-4549
Claude Mythos access expansion (Cyber Verification Program) and vulnerability management implications
Claude Mythos access expansion (Cyber Verification Program) (TL-2026-4549), also tracked as Project Glasswing, is a medium-severity software vulnerability, first published 2026-10-27. It has no confirmed attribution, affects Anthropic Claude Mythos 5.1 / Cyber Verification Program, maps to 4 MITRE ATT&CK techniques (T1190, T1587.004, T1588.006), and is covered by 9 detection rules and 11 indicators of compromise.
- Severity
- MEDIUMAssessed severity
- CVEs
- 0None referenced
- Techniques
- 4MITRE ATT&CK
- Actors
- 0Not attributed
- Detection rules
- 9SPL · KQL · Sigma
- IOCs
- 11Indicators of compromise
Key facts for TL-2026-4549
- Threat ID
- TL-2026-4549
- Also known as
- Project Glasswing, Cyber Verification Program, CVP
- Severity
- MEDIUM
- Status
- MONITORING
- Category
- VULNERABILITY
- First published
- Last reviewed
- Attribution confidence
- LOW
- Motivation
- UNKNOWN
- Target sectors
- technology, government administration, critical infrastructure, finance, telecoms
- Target regions
- Global
- Detection rules
- 9
- Indicators of compromise
- 11
Malware and tooling in Claude Mythos access expansion (Cyber Verification Program)
Malware and tooling: Claude Mythos 5.1, Claude Opus 5.5, Claude Sonnet 5.5
How Claude Mythos access expansion (Cyber Verification Program) works
Anthropic released Claude Mythos 5.1 in September 2026 and, on 2026-10-06, relaunched Project Glasswing access as a three-tier Cyber Verification Program (Defense, Red Team, Specialized). Sysdig, citing Mandiant M-Trends 2026, argues that AI-accelerated vulnerability discovery plus a mean time-to-exploit of negative seven days compresses defenders' remediation windows.
This is a contextual trend item, not an exploited vulnerability: no CVE, threat actor, IOC, PoC or active exploitation is stated in the sources.
According to Sysdig (Matt Kim, 2026-10-27), Anthropic released Claude Mythos 5.1 in September 2026 and folded Project Glasswing into an expanded Cyber Verification Program (CVP) in October 2026. Access remains restricted to vetted organizations. Glasswing partners identified more than 129,000 verified vulnerabilities between April and July 2026, of which more than 33,000 were critical or high severity. Sysdig stresses that discovery and exploitation are not the same thing: Mythos capability is positioned around vulnerability discovery, while exploit generation and penetration testing/red teaming are gated behind higher verification tiers.
Per reporting on the 2026-10-06 announcement, the CVP has three tiers: Defense Access (incident investigation, malware analysis, vulnerability assessment; open to security teams at businesses, nonprofits, universities, government, open-source maintainers and individual researchers), Red Team Access (authorized penetration testing and simulated attacks for internal/government red teams and security testing firms) and Specialized Access (verified organizations authorized to test high-risk systems such as flight operating systems, power grids, telecom networks and interbank-transfer infrastructure, reviewed in collaboration with the US government). Each tier includes Claude Opus 5.5, Claude Sonnet 5.5 and Claude Mythos 5.1. Anthropic retains real-time blocks on activity that could cause physical harm or widespread disruption, including ransomware deployment and testing of high-risk safety systems. Glasswing members transition to Specialized Access, and applications receive a decision or information request within seven business days.
The defender-relevant driver is exploitation speed. Mandiant M-Trends 2026 puts the estimated mean time-to-exploit at negative seven days (63 days in 2018, crossing zero in 2024), meaning exploitation commonly precedes patch availability; exploitation of vulnerabilities is the leading initial access vector for the sixth consecutive year at 32% of intrusions. Secondary reporting also cites 28.3% of disclosed CVEs exploited within 24 hours. The risk for vulnerability management teams is volume: AI-assisted discovery at scale (129,000+ findings) will raise disclosure and patch-queue pressure, and AI may lower the skill and time needed to turn advisories into working exploits.
Sysdig's recommendations: centralize scanning of CVE and non-CVE findings, prioritize exploitable and in-use vulnerabilities over raw CVSS scores, automate remediation at the source, and use runtime security as the final safeguard. The Mandiant and Glasswing figures originate with third parties and were not independently verified beyond secondary reporting.
MITRE ATT&CK techniques used in TL-2026-4549
Initial Access
T1190 Exploit Public-Facing Application
Resource Development
T1587.004 Exploits; T1588.006 Vulnerabilities
Reconnaissance
Affected products and versions in Claude Mythos access expansion (Cyber Verification Program)
- Anthropic — Claude Mythos 5.1 / Cyber Verification Program
Remediation for Claude Mythos access expansion (Cyber Verification Program)
Immediate actions
- Prioritize remediation by exploitability and in-use/runtime exposure rather than CVSS score alone
- Prioritize internet-facing assets and CISA KEV-listed vulnerabilities for patching
Workarounds
- Apply compensating controls (segmentation, virtual patching, WAF rules) where patches are unavailable at disclosure time
- Eligible defenders may apply to Anthropic's Cyber Verification Program (Defense Access tier) for defensive tooling
Longer-term hardening
- Centralize scanning of CVE and non-CVE findings into a single view
- Automate remediation at the source (base images, IaC, pipelines)
- Deploy runtime security as a final safeguard against exploitation before patching
- Plan patch-queue capacity for higher AI-assisted vulnerability disclosure volume
Timeline of Claude Mythos access expansion (Cyber Verification Program)
- Mandiant baseline: average time-to-exploit of 63 days after disclosure (year-level data point per M-Trends 2026; exact date not stated)
- Mandiant mean time-to-exploit crosses zero (about -1 day) in 2024 (year-level data point; exact date not stated)
- Start of the April-July 2026 window in which Project Glasswing partners identified 129,000+ verified vulnerabilities (33,000+ critical/high); day not stated
- End of the April-July 2026 Glasswing findings window (month-level; day not stated)
- Anthropic releases Claude Mythos 5.1 in September 2026 (day not stated); access limited to vetted organizations
- Anthropic relaunches the Cyber Verification Program with three tiers (Defense, Red Team, Specialized); Glasswing members move to Specialized Access
- Sysdig publishes analysis of implications for vulnerability management, citing Mandiant's negative seven-day mean time-to-exploit
Sources cited for Claude Mythos access expansion (Cyber Verification Program)
- Mythos access is expanding: what this means for vulnerability management (Sysdig, Matt Kim)
- Anthropic Expands Claude Cyber Verification Into Three Tiers
- Claude Mythos Reshapes Exploit Timelines as Anthropic Widens Cyber Access
- Mean time to exploit has gone negative: security strategy has to change (Security Boulevard)
- Mandiant Data: Mean Exploit Time Drops to 2.1 Days
- Mandiant M-Trends 2024 (Google Cloud Threat Intelligence)
- Anthropic, vetted defenders and Claude guardrails (Dark Reading)
Detection coverage for TL-2026-4549
As of 2026-10-27, Threadlinqs Intelligence publishes 9 detection rule(s) for TL-2026-4549 across Splunk SPL, Microsoft KQL and Sigma, covering 11 indicator(s) of compromise. The whole corpus is readable without an account; a free account unlocks full detection query text in Splunk SPL, Microsoft KQL and Sigma; paid tiers add raw indicator values, correlation and the MCP server. Threadlinqs MCP server · View plans.