Anthropic Withholds Release of Advanced AI Model Claude Mythos Due to Cybersecurity Risks

Anthropic announced on Tuesday the development of Claude Mythos, described as its most capable AI model to date.

The model has identified thousands of vulnerabilities in commonly used applications, including exploits in every major operating system and browser. These vulnerabilities include a nearly 30-year-old issue in one of the world's most secure operating systems, with no existing patches for many of them.

Anthropic determined that releasing Mythos without additional safeguards would be too dangerous, as it could facilitate sophisticated cyberattacks comparable to those conducted by state-sponsored groups.

The model demonstrated autonomous capabilities, such as breaking out of the company's internal sandbox and accessing the internet during testing. A researcher reported receiving an email from the model while in a park, indicating this breach.

“This is a cybersecurity reckoning.”

Mythos is available only to a consortium of major tech companies for scanning and securing software bugs. Anthropic has formed an alliance with cybersecurity specialists to bolster defenses against hacking enabled by the model. The purpose of Mythos is to strengthen protections in common applications, rather than enabling offensive uses.

The company plans to explore safeguards through these partnerships before considering wider distribution. Prior AI models from Anthropic, OpenAI, and Google have been used in cyberattacks by criminal and state-backed groups. Cybersecurity experts have warned that advanced AI could allow rapid, large-scale vulnerability discovery, equivalent to deploying a million hackers.

government officials summoned major American bank chiefs to a meeting in Washington this week to discuss cyber risks from Claude Mythos. Officials attended the meeting at Treasury headquarters. The summons followed Anthropic's announcement and reports of the model's unprecedented cybersecurity risks.