Project Glasswing: what Mythos showed us
2026-05-27T19:24:10Z•c81d1055a7d53776e1b9428b33949f9eca13061d6c2b2a6604ead7ad0931fde2
account-abuseacmeai-securityapi-tokenscertificate-validationclient-side-securitycloudflarecopy-failddoshomeserverhybrid-kemipseclinux-kernellog-explorermanaged-oauthmatrixmcpnon-human-identitiesoauthphishing-detectionpingorapost-quantumpq-cryptographyrequest-smugglingvulnerability-scanner
What happened
Collection of Cloudflare security blog posts (Mar–May 2026) covering: experiments using LLMs for live-code security analysis (Mythos/Glasswing); rapid detection, investigation, and mitigation of a public Linux kernel privilege-escalation (“Copy Fail”) with no customer impact; GA of post-quantum IPsec support via hybrid ML‑KEM and a company-wide post-quantum roadmap targeting 2029; expanded protections for non-human identities (scannable API tokens, OAuth visibility, resource-scoped permissions, Managed OAuth for Access); governance and deployment guidance for MCP and Shadow MCP detection; GA/E
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- c81d1055a7d53776e1b9428b33949f9eca13061d6c2b2a6604ead7ad0931fde2
- Enrichment time
- 2026-05-27T19:24:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.