ai
CISA Uses Anthropic Mythos AI to Scan U.S. Government Code Repositories
Rappler reported that the Cybersecurity and Infrastructure Security Agency has deployed Anthropic's Mythos model to audit federal software for vulnerabilities. Sources said the scans have already found a large number of issues. The effort continues despite prior friction between Anthropic and U.S. agencies.
Jul 7, 1:23 AM·1m read1 source
RapplerAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
The Cybersecurity and Infrastructure Security Agency is using Anthropic’s Mythos AI model to scan U.S. government code repositories for vulnerabilities, Rappler reported. Three people familiar with the matter said on July 6, 2026, that the scans are underway.
The work is handled by CISA’s Attack Surface Evaluation team, which conducts digital security assessments and hacking exercises across government systems. Two of the sources stated that the audits have already uncovered a large number of vulnerabilities. Reuters could not determine how much code had been reviewed or the severity of the bugs found.
Anthropic did not respond to questions about the initiative. A CISA representative said in June 2026 that he would check if there was anything to share but did not reply to further emails. Anthropic confidentially filed for a U.S.
Initial public offering. In February 2026 the company refused to remove safeguards that prevented its AI from being used for autonomous weapons or domestic surveillance. The Pentagon responded by placing Anthropic under a formal supply-chain risk designation.
A judge blocked that designation in March 2026. The National Security Agency has been using Mythos since at least April 2026. The New York Times reported that NSA analysts tested the model in classified settings and were impressed with its capabilities.
