Advertise here | 6-min Read

Don’t watch WWDC alone – join MacPaw’s live Discord party
Watch the WWDC keynote with the MacPaw community. Jump into real-time reactions, live commentary from @zollotech, and fast-paced chat as announcements drop. Plus giveaways – MacBook, MacPaw merch, and more.

Claude Cowork Just Got a Major Upgrade

Project Glasswing found 10,000 critical vulnerabilities in 30 days — and the industry isn't ready

Anthropic published its first Project Glasswing progress report this week. In approximately 30 days, Claude Mythos Preview and its 50+ partner organisations identified more than 10,000 high or critical severity vulnerabilities across systemically important software — a rate of discovery that no human security team has ever come close to matching, and one that has completely overwhelmed the industry's ability to respond.

The details:

• Of the 10,000+ vulnerabilities identified: 6,202 were initially flagged as high or critical severity across more than 1,000 open-source projects; 1,726 were confirmed as valid true positives; and 1,094 were confirmed as high or critical severity after full review — meaning real, exploitable flaws in software that runs global infrastructure.

• IBM formally joined the coalition this week, and South Korea is in active discussions to become the first sovereign government member. The coalition's partner count is now approaching 70 organisations.

• The bottleneck has fundamentally shifted: finding vulnerabilities is no longer the hard part. Fixing them at this pace — across thousands of open-source projects simultaneously — is a problem that existing patch management systems were not designed to handle.

• Mozilla independently validated Glasswing's methodology, claiming a 10x improvement in vulnerability detection versus traditional tooling — a figure that, if it holds under scrutiny, reframes what enterprise security teams should be investing in.

Why it matters: Glasswing is the clearest proof yet that frontier AI has moved from impressive demos to consequential infrastructure. The 1,094 confirmed high-severity vulnerabilities found in a single month represent more meaningful security work than most national cybersecurity agencies produce in a year. The harder question — which nobody has cleanly answered yet — is what happens when the discovery rate permanently outpaces the remediation rate. The software that runs banks, hospitals, and power grids has vulnerabilities that Glasswing can find faster than anyone can patch them. That is not a technology problem. It is a coordination problem. And it is now urgent.

AI Cheat Sheets

The Build iOS Apps Plugin Comes to Codex

AI news highlights

• Claude Opus 4.8 ships — 88.6% SWE-bench, same price — parallel subagent workflows and 2.5x fast mode, $5/$25 per million tokens
• Prompt position matters more than prompt content — 3 years, 50 models, one finding: where you put info changes the answer more than what's in it
• JPMorgan reclassifies AI as core infrastructure — $19.8B tech budget, 2,000 AI staff, $2.5B annual value projected from AI agents
• Anthropic MCP crosses 97 million installs — transitions from experimental standard to foundational agent infrastructure
• Workday launches hundreds of AI agents across HR, Finance, Legal — Sana conversational interface now GA across enterprise systems
• NVIDIA launches JetPack 7.2 at COMPUTEX — agentic AI skills and NemoClaw support for physical AI on Jetson devices
• Alteryx Agent Studio launches at Inspire 2026 — business analysts convert existing workflows into agents without IT teams
• Gemini 3.5 Flash GA — frontier intelligence at 4x speed, now live in Gemini API and AI Studio

Trending AI tools

• ModelHub — Menu bar app for discovering and launching local LLMs on Mac
• Agentspan — Open-source runtime for durable AI agents with retries and approvals
• MartinLoop — Policy controls, spend limits, and audit trails for production agents
• GPS — Memory layer that stores repo rules and past lessons for coding agents
• Runtime — Sandboxed agent execution with policy controls for enterprise
• Starnus — End-to-end AI sales from prospecting to outreach, built by ex-robotics founders
• Make — AI automation you can visually build and orchestrate across any app
• ZoomMate — Converts live meetings into actionable deliverables — Salesforce, Jira, Slack auto-sync

That’s a Wrap

SPONSOR US

Get your business in front of over 90k+ AI professionals

8020AI is the world’s #1 AI Newsletter, Read by 90k+ professionals from leading companies such as Google, OpenAI, Meta, and Microsoft.

We've assisted in promoting Over 500 AI-Related Products. Will yours be the next?

What We Can Offer:

• Launch an Advertising Campaign

• Introduce New Product or Features

• Other Business Cooperation

Get in touch today.

Or Email our founder Alamin at [email protected]

FEEDBACK

How was your experience with 8020AI today?

Login or Subscribe to participate in polls.

If you have specific feedback or anything interesting you’d like to share, please let us know by replying to this email.