Comcast CISO Says AI Discovery of Vulnerabilities Makes Validation the New Bottleneck
Anthropic released case studies from Project Glasswing, where security leaders at Comcast and Booz Allen described the validation bottleneck their teams face after Claude Mythos models identified cross-component exploit chain vulnerabilities in codebases.
In a Project Glasswing case study published by Anthropic on October 6, 2026, Noopur Davis, Chief Information Security Officer at Comcast, described a specific workflow shift: as AI models generate security findings at scale, validating those findings has become the new bottleneck. She noted that 'discovery is becoming faster and easier, but the volume of findings is enormous; validating these findings is the new bottleneck.'
The mechanism behind this observation is the exploit chain—a path attackers create by linking multiple individually minor weaknesses into a route to serious harm. Traditional scanning tools can identify vulnerabilities within single files or components but struggle to track cross-system interaction flaws. During an assessment covering 258 business-critical systems and approximately 170 million lines of code, Comcast’s Claude Mythos Preview identified an authentication bypass vulnerability. This issue was not caused by a single defective component but arose from interactions between multiple systems, where assumptions appeared correct when reviewed independently.
Booz Allen’s case further illustrates the workflow changes. Sahil Sanghvi, Vice President of AI Engineering at Booz Allen, stated that the model was 'surprising in its ability to reason across boundaries rather than just identifying isolated code issues.' One analyst reviewed eight production systems across 138 code repositories in twelve days. Brad Medairy, President of National Cybersecurity at Booz Allen, noted that without Mythos, a portfolio review at that scale would have taken several months and required a larger team.