Anthropic recently announced Project Glasswing , an initiative that enables tech companies like Apple to use its new frontier AI model Claude Mythos Preview to find security vulnerabilities across operating systems and web browsers. The Wall Street Journal today reported that researchers at cybersecurity firm Calif used Claude Mythos Preview to uncover a new macOS security vulnerability last month. Specifically, they used the model to write code that links together two macOS bugs in a way that resulted in what is known as a privilege escalation exploit. The security researchers said the exploit would not have been possible with Mythos alone, as it still required their human expertise on top, but it nevertheless proves that AI can assist with discovering software vulnerabilities. Apple said it was reviewing Calif's report to validate the findings. "Security is our top priority, and we take reports of potential vulnerabilities very seriously," an Apple spokesperson told The Wall Street Journal . It is unclear if Apple has already patched the exploit. Apple's security notes for the macOS 26.5 update released this week mention a fix for a kernel-level vulnerability, and it credits Calif and Anthropic for discovering it. Yet, the report said that Calif only met with Apple this week and suggested that a fix was still coming. We have reached out to Apple for comment. Related Roundup: macOS Tahoe Tags: Anthropic , Apple Security Related Forum: macOS Tahoe This article, " Apple Alerted to macOS Security Vulnerability Uncovered With AI Tool " first appeared on MacRumors.com Discuss this article in our forums
OpenAI is forcing Mac users to update ChatGPT and other desktop apps soon, after a supply chain attack exposed signing certificates that Apple's security systems use to verify trusted software. OpenAI is forcing Mac users to update ChatGPT The company disclosed the incident on May 13 and confirmed malware linked to the "Mini Shai-Hulud" attack infected two employee devices through the TanStack npm ecosystem. Investigators identified unauthorized access activity in a limited set of internal source code repositories connected to those employees. OpenAI rotated its signing certificates and re-signed affected apps to prevent potential misuse of the exposed credentials. The company found no evidence that customer data, production systems, or intellectual property were compromised during the incident. Apple's macOS security protections will block apps signed with the older certificates after June 12, which makes the update mandatory for affected Mac users. Continue Reading on AppleInsider | Discuss on our Forums
