Project Glasswing: what Mythos showed us
2026-05-28T07:24:07Z•961aab43e1ff35a4575d81a93a73f764982bb2010af0c780ec5e43b544ccd0fa
account-abuseacmeai-securityapi-securityclient-side-securitycloudflarecloudyddosipseclinux-kernelllm-securitylog-explorermanaged-oauthmythosoauthpingorapost-quantumpqcprivilege-escalationrequest-smugglingsecurity-blogvulnerabilityvulnerability-scanner
What happened
A collection of Cloudflare security blog posts (Jan–May 2026) covering: practical testing of security-focused LLMs (Project Glasswing/Mythos); emergency response and fleetwide mitigation for a public “Copy Fail” Linux kernel privilege-escalation disclosure (no customer impact reported); GA support for post‑quantum hybrid IPsec interoperability; fixes for request smuggling in the open‑source Pingora ingress proxy (Pingora 0.8.0); mitigation of an ACME certificate‑validation path vulnerability; a large DDoS threat report (record 31.4 Tbps attack); new and GA security products and features (AI‑dr
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- 961aab43e1ff35a4575d81a93a73f764982bb2010af0c780ec5e43b544ccd0fa
- Enrichment time
- 2026-05-28T07:24:07Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.