Vulnerability disclosures estimated to have increased 120%... Analysis of 13 organizations participating in Glasswing

Project Glasswing, a vulnerability-disclosure program, is estimated to have driven a roughly 120% increase in public vulnerability disclosures among its 13 participating organizations compared with a control group of 267 Chinese companies, according to a preliminary paper by Queen Mary University of London researcher Thomas Mosk analyzing data from October 2025 to September 2026. Based on the participants' pre-program average of 29 monthly disclosures, the estimated effect equates to about 36 additional disclosures per organization per month. The study found no statistically significant delay in fixes or patch releases among the affected suppliers and Linux distributions, suggesting greater transparency did not come at the cost of slower remediation. The findings matter because they offer early evidence on whether coordinated disclosure programs can accelerate bug reporting without worsening patch timelines. What to watch next is peer review of the preprint and whether the disclosure gains hold as more organizations join the program.