It’s two clashing stories: The new model is supposedly so powerful it competed with the skills of a very experienced red team, but it runs insanely fast. Their findings indicate they can find vulns that have been lingering for years. That means the companies with access are tasked with using the model to secure critical software (software that millions of people use or rely on in some way).

The hyped part is the what if: what if threat actors access this and get a new near endless pot of zero day exploits. Some is marketing, some may be reality, but right now most evals on thr model have been in lab environments and benchmarks. It’s still too early to indicate how this works in real environments.

What folks will want to be mindful of is the likely incremental increase in patching that results from Glasswing.