GoKawiil
Tech News
An analysis of Anthropic's public Vulnerability Disclosure Ledger by researcher Patrick Garrity found that Claude Mythos, part of Project Glasswing, has generated 26,153 vulnerability findings since April 2026. Of those, only about 2,736 have entered the disclosure pipeline, roughly 202 have been patched, 245 withdrawn, and 191 await initial reporting to maintainers, leaving nearly 90% of findings unprocessed.
Security firm VulnCheck discovered three separate backdoor-like implants embedded in firmware made by Shenzhen Zhibotong Electronics (ZBT), whose hardware is resold globally under numerous brand names. The most severe, dubbed ENDLESSDOORS, disguises itself as a Linux kernel process, phones home to a hard-coded command server without authentication or encryption, and grants attackers root-level control over the router. VulnCheck confirmed the flaw is real by hijacking a test router's command channel themselves, and identified it across 20 ZBT-based router models.