Generated by Codex with GPT-5
What happened
Cloudflare’s official blog published Project Glasswing: what Mythos showed us, a May 18, 2026 post about testing frontier security models on Cloudflare’s own code and about the production workflow needed to turn autonomous vulnerability research into useful defensive work.
The post is strongest when it separates model capability from security-system capability. Cloudflare says Mythos Preview changed the kind of work a model could complete: instead of stopping after a plausible bug report, it could reason across smaller primitives, build an exploit chain, write proof-of-concept code, compile and run that code in a scratch environment, then revise the hypothesis when execution disagreed. That loop matters because vulnerability research is not only a search problem. A suspected flaw becomes operationally meaningful when there is evidence that it is reachable, exploitable, distinct from other findings, and worth the cost of remediation.
Continue ...