VulnCheck tracker records one confirmed in-the-wild exploit across 225 CVEs credited to Anthropic and Project Glasswing

Sources: primary, discussion
Summary: The Register reported on 2026-09-21 on a VulnCheck tracker covering 225 CVEs credited to Anthropic and Project Glasswing, of which one is recorded as exploited in the wild. The report's framing is that disclosure volume from model-assisted vulnerability research has grown faster than attacker use of it.
Why it matters: A patch queue ordered by advisory count cannot absorb this volume, so the in-the-wild figure is the number that should drive ordering.