Project Glasswing: what Mythos showed us
2026-06-02T19:24:09Z•f4cf93035f1caae3415c5d362bbacdfb29792ef72429981b710f8ae37bb667cd
account-abuseacme-validationai-securityapi-securityclient-side-securitycloudflarecloudycopy-failddosipseclinux-privilege-escalationllm-securitylog-explorermanaged-oauthmatrixmcpphishingpingorapost-quantumpq-ipsecpq-roadmapproject-glasswingrequest-smugglingvulnerability-disclosurevulnerability-scanner
What happened
Cloudflare published a collection of security updates covering multiple areas: tests of LLM-based security tooling (Project Glasswing/ Mythos), mitigation and fleet-wide response to a publicly disclosed Linux kernel privilege escalation (“Copy Fail”) with no customer impact, disclosure and fixes for request-smuggling bugs in Pingora OSS (fixed in Pingora 0.8.0), and remediation of an ACME validation logic vulnerability. They announced GA and roadmap items for post-quantum adoption (IPsec hybrid ML‑KEM GA, target for full PQ security by 2029), new and GA security products (AI Security for Apps,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- f4cf93035f1caae3415c5d362bbacdfb29792ef72429981b710f8ae37bb667cd
- Enrichment time
- 2026-06-02T19:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.