The cybersecurity firm 360 Security Technology has unveiled a bug-finding tool called Tulongfeng, and its CEO says it now matches the capability of Anthropic’s Mythos system from the United States. The claim, made by Zhou Hongyi at a Beijing conference, points directly at a grim future for global digital security. Industry analysts have already coined a term for what may come next: “bugmageddon.” Tulongfeng finds software vulnerabilities.
So does Mythos. Both let hackers break into systems before those flaws are patched.
The difference, until now, was that American firms held the clear lead. Zhou told the Wall Street Journal that Tulongfeng is “this kind of powerful weapon that can alter the landscape of cyberwarfare.” He added that such a tool “can’t remain solely in American hands.” The fallout is not theoretical. Widespread access to automated bug-finding AI means more zero-day exploits in the wild.
More zero-days mean more attacks on banks, hospitals, power grids, and government networks. The timeline for patching vulnerabilities shrinks.
The advantage shifts to the attacker. That is the “bugmageddon” analysts warn about — a cascade of cyberattacks hitting at global scale, with no time to defend. Two Beijing-based firms are driving this shift.
One is 360 Security Technology. The other is Z.ai, also known as Zhipu AI. Together, they have narrowed the gap with American competitors specifically in the area of finding bugs.
The Wall Street Journal’s Stephen M. Lepore reported that these companies have closed the distance in that narrow but critical slice of the AI race.
But the competitive landscape is not uniform. China still lags behind on other AI fronts, including OpenAI products such as ChatGPT. The broader sector remains uneven.
The gap in general-purpose AI is real. Yet in cybersecurity — a domain where a single unpatched bug can bring down a pipeline or a hospital network — the gap is closing fast.
The timing matters. President Donald Trump and Chinese President Xi Jinping have maintained what Trump calls a “good relationship.” But the rivalry between the two superpowers remains tense. The Trump administration has been imposing limits on public access to new Anthropic systems amid increased security concerns.
Those limits may slow the spread of Mythos in the U.S. But they do nothing to stop Tulongfeng from being deployed in China — or exported. What to watch next is simple. Watch whether Tulongfeng or similar tools appear in the hands of state-backed hacking groups.
Watch whether the pace of zero-day disclosures accelerates. Watch whether the “bugmageddon” scenario moves from analyst warnings to front-page news.
The tool exists. The claim of parity has been made. The consequences are waiting.
{“@context”: “https://schema.org”, “@type”: “NewsArticle”, “headline”: “Chinese Firm Unveils Bug-Finding Tool Matching US System’s Capability”, “description”: “The cybersecurity firm 360 Security Technology has unveiled a bug-finding tool called Tulongfeng, and its CEO says it now matches the capability of Anthropic’s Mythos…”, “datePublished”: “2026-06-28T11:19:00+00:00T09:30:00+00:00”, “author”: {“@type”: “Person”, “name”: “Sophie King”}, “publisher”: {“@type”: “Organization”, “name”: “InfoPulse Today”, “url”: “https://newsfeed.infopulsetoday.com/”}}
