May 2026 Patch Tuesday forecast: AI starts driving security industry changes Project Glasswing. This is one of three major security industry changes I’ll cover today. The Anthropic Mythos vulnerability discovery model has already proven to be game changing in its ability to identify new vulnerabilities in software. Many of these vulnerabilities have existed for 10 to 15 years without human discovery. In a recent announcement from Mozilla, they discovered 271 vulnerabilities when running it against Firefox 150 prior to release. This sheer volume of new vulnerabilities is driving change. NIST moves to threat-based CVE analysis In an unprecedented agreement known as Project Glasswing, 12 companies agreed to work with Anthropic on a preview version of this new technology. These include Apple,…