Anthropic gives away the bug scanner Qihoo 360 called a 'cyber nuclear weapon'
Qihoo 360 staked its AI story on founder Zhou Hongyi's claim that Anthropic's Mythos bug hunter is a "cyber nuclear weapon" China must match. Anthropic's October access expansion and free OSS Scanner now undercut the scarcity behind that pitch, and 360's controlling shareholder has just finished a 56-million-share trim.
Vincent Jiang · 3 min read
A weapon China cannot buy
At the 14th Beijing Cybersecurity Conference on June 25, 2026, Zhou Hongyi, founder of Chinese security vendor Qihoo 360, a company on the US Entity List since 2020, called Anthropic's Mythos model the equivalent of a "cyber nuclear weapon" 12. US curbs keep foreign nationals off the model, he argued, letting US-aligned organizations hunt flaws in the software everyone else runs, so China needs matching power for mutual deterrence.
A swarm must beat brute force
His answer was Tulongfeng, a multi-agent swarm of security agents, plus Yitianzhen, which simulates attacks against a customer's own defenses. "If the American approach is about cultivating a genius hacker, the 360 approach is about organizing a professional attack and defense team," Zhou said 1. Domestic models trail US ones by 20 to 30 percent in underlying capability, he added, so a swarm must beat brute force 12. He claimed 3,432 vulnerabilities found so far, and Microsoft−0.98% — Microsoft, down 0.98 percent today-recognized discoveries of Windows, Office and Excel bugs dormant for five, eight and ten years 12.
Anthropic just made bug-finding free
Then the other side of the wall moved. On October 6, Anthropic$350B — Anthropic, private, latest valuation $350B folded Project Glasswing into a three-tier Cyber Verification Program: Defense, Red Team and Specialized Access, the last reviewed in collaboration with the US government, all covering Claude Opus 5.5, Sonnet 5.5 and Mythos 5.1 3.
Two days later came the Cyber Mission and OSS Scanner, which scans open-source projects free and emails maintainers model-generated reports, reproduction steps and fix candidates included, with no human review 4. In validation, 85 of 97 sampled high-severity reports met disclosure criteria; early user wolfSSL judged 72 of 74 valid, five becoming CVEs 5.
Both checks cleared most early OSS Scanner reports
- Met the bar
- Reports reviewed
Data
| Met the bar | Reports reviewed | |
|---|---|---|
| High-severity sample | 85 | 97 |
| wolfSSL-judged | 72 | 74 |
The bill lands on Bank of America
Scale is the argument. Glasswing partners verified at least 129,000 vulnerabilities between April and July 2026; Anthropic's own scanning added 5,500 through October, and more than 33,000 of the total were rated critical or high, a tally Anthropic calls a floor drawn from partial survey data 3.
Anthropic's partners verified 129,000 bugs; 360's swarm claims 3,432
- Estimate
Data
| Value | |
|---|---|
| Glasswing partners | 129,000 |
| Anthropic own scanning | 5,500 |
| Tulongfeng (360 claim) (estimate) | 3,432 |
Fixing is the bottleneck: months often pass between a finding and a patch 4. Bank of America+0.67% — Bank of America, up 0.67 percent today hired about 1,000 contractors in the second quarter to join roughly 3,000 employees remediating flaws found by AI tools including Mythos, and put combined remediation and anti-money-laundering spend at several hundred million dollars in the third quarter 6.
The wall protects the market and erodes the pitch
The bull case survives. Chinese customers still cannot buy Mythos, so the export wall Zhou denounces also fences in his market, and in September the Pwnie Awards gave 360 and Tsinghua University's Institute for Network Sciences and Cyberspace a Most Innovative Research Award 7.
But the wall protects the market and erodes the pitch at the same time. Free scanning outside China removes the scarcity the deterrence story needs, and Nano Work, 360's agent platform launched August 3 with 100 million free tokens for 1,000 small businesses, fights the same price war at home 8.
The Q3 report decides it
Between July 15 and October 14, controlling shareholder Tianjin Qixin Zhicheng sold 56.04 million shares, 0.8 percent of the company, executing its plan to within 91 shares of the cap and leaving 46.3 percent, as disclosed on October 16 910. The next reading is 360's third-quarter report: whether Tulongfeng, Yitianzhen or Nano Work appear in it as revenue, after a quarter when the story lived mostly on a conference stage 910.
The daily newsletter
