Mythos AI is reshaping cyber risk

What's happened

Anthropic has released the Mythos model to a limited group of firms under Project Glasswing and has warned it can find thousands of software vulnerabilities faster than humans. Regulators and finance leaders in the US, UK, EU and Canada have convened urgent meetings, wargames and briefings to assess risks and coordinate defensive access and rules.

What's behind the headline?

What is happening now

• Anthropic has launched Mythos as a controlled defensive tool and is giving selective partners access under Project Glasswing. That release model is creating a geopolitical scramble for capability and oversight.

Who is driving the story

• Anthropic is driving the narrative by warning about Mythos’s power and limiting access. Regulators and big banks are driving the policy response by convening emergency meetings and wargames.

The operational risk

• Mythos will accelerate the discovery of vulnerabilities, creating a "patch gap" where the act of patching will produce blueprints attackers will study. Organisations will face hundreds or thousands of rapid patches, turning routine maintenance into a high-risk window.

The geopolitical and market consequence

• Access to frontier models will become a strategic asset. Countries and large firms that are receiving Mythos access will gain defensive and offensive insight that smaller actors will lack, increasing concentration of cyber capability.

Regulatory trajectory (forecast)

• Regulators will increase cross-border coordination and will require privileged controls on distribution of offensive-capable cyber models. Financial authorities will impose stricter operational-resilience standards and accelerate incident-response drills.

What this means for readers

• Large institutions will harden systems and accelerate security spending. Small organisations that are adopting AI-generated code will face rising exposure because their apps lack formal security review. Individuals will see indirect effects through service outages and data breaches; they will need to pressure service providers and update hygiene practices.

Bottom line

• Mythos will force an urgent split in the AI ecosystem: tightly controlled, regulator-engaged deployments for critical infrastructure and wider proliferation of similar capabilities that will increase systemic cyber risk unless rules and defensive capacity are scaled rapidly.

How we got here

Anthropic has developed Mythos, an AI designed to locate software flaws. The company has limited access via Project Glasswing to about 40–50 organisations. Governments and financial regulators have raised alarms over systemic cyber risk and are coordinating briefings, stress tests and legal tussles with the US administration.

Our analysis

The New York Times has reported that "Mythos... had set off a global scramble" and that world leaders "have struggled to figure out the scale of the security risks" (Paul Mozur). The Times has also said Anthropic has given access and credits to more than 50 large organisations under Project Glasswing (New York Times, Apr 15). Reuters and AP News have reported on Anthropic's clashes with the US administration and that CEO Dario Amodei "met with White House officials" to discuss collaboration (Julian E. Barnes; Reuters). The Guardian has quoted Bank of England governor Andrew Bailey saying Anthropic "may have found a way to 'crack the whole cyber-risk world open'" and that central banks are running a trilateral wargame to test responses to a global bank collapse (Richard Partington; Kalyeena Makortoff). Business Insider and other outlets have documented industry concern, with the American Securities Association warning Mythos "could be used to hack" central databases and urging action. The Guardian and The New York Times have both described the "patch gap" risk where rapid AI-driven vulnerability discovery will create exploit windows (Andrew Ross Sorkin; The Guardian). Together these pieces show Anthropic framing Mythos as a defensive tool, regulators demanding controlled access and banks and governments coordinating urgent defensive measures.

Go deeper

• How will regulators restrict access to AI models that can find zero-day vulnerabilities?
• Will banks and critical vendors be required to run regular AI-focused stress tests?
• How quickly will competing AI labs release similar cyber-capable models and change the risk landscape?

More on these topics

• Anthropic - Artificial intelligence company

  Anthropic PBC is a U.S.-based artificial intelligence startup public-benefit company, founded in 2021. It researches and develops AI to "study their safety properties at the technological frontier" and use this research to deploy safe, reliable models for

• Scott Bessent - Investor and philanthropist

  Scott K. H. Bessent is an American hedge fund manager. He is the founder of Key Square Group, a global macro investment firm, and worked as a financier for George Soros. Bessent has been a major fundraiser and donor for Donald Trump. He was an economic ad

• Dario Amodei - CEO and co-founder of Anthropic, Ph.D. Princeton University 2011

  Dario Amodei (born 1983) is an American artificial intelligence (AI) researcher and entrepreneur. In 2021, he and his sister Daniela Amodei co-founded Anthropic, the company behind the large language model series Claude. Prior to that, he was the vice...

• Microsoft - Technology company

  Microsoft Corporation is an American multinational technology company with headquarters in Redmond, Washington. It develops, manufactures, licenses, supports, and sells computer software, consumer electronics, personal computers, and related services.

• Apple Inc. - Technology company

  Apple Inc. is an American multinational technology company headquartered in Cupertino, California, that designs, develops, and sells consumer electronics, computer software, and online services.

• Susie Wiles - Chief of Staff to President of the United States

  Susan Summerall Wiles is an American political consultant who served as co-chair of Donald Trump's successful 2024 presidential campaign, having previously worked on his 2016 campaign, as well as Ronald Reagan's 1980 campaign.

• Google - Technology company

  Google LLC is an American multinational technology company that specializes in Internet-related services and products, which include online advertising technologies, a search engine, cloud computing, software, and hardware.

• Jerome Powell - Chair of the Federal Reserve

  Jerome Hayden "Jay" Powell is the 16th Chair of the Federal Reserve, serving in that office since February 2018. He was nominated to the Fed Chair position by President Donald Trump, and confirmed by the United States Senate.

• Amazon - E-commerce company

  Amazon.com, Inc., is an American multinational technology company based in Seattle, Washington. Amazon focuses on e-commerce, cloud computing, digital streaming, and artificial intelligence.

• OpenAI - Artificial intelligence company

  OpenAI is an artificial intelligence research laboratory consisting of the for-profit corporation OpenAI LP and its parent company, the non-profit OpenAI Inc.

• Andrew Bailey - Wikimedia disambiguation page

  Andrew Bailey may refer to: Andrew Bailey (banker) (born 1959), British banker, Governor of the Bank of England Andrew Bailey (baseball) (born 1984), American baseball pitcher and coach Andrew Bailey (performance artist) (born 1947), British performance.

• Pete Hegseth - United States Secretary of War

  Peter Brian Hegseth (born June 6, 1980) is an American government official and former television personality who has served since 2025 as the 29th United States secretary of defense. Hegseth studied politics at Princeton University, where he was the publi

• JPMorgan Chase - Investment banking company

  JPMorgan Chase & Co. is an American multinational investment bank and financial services holding company headquartered in New York City.

• European Central Bank - Bank

  The European Central Bank is the central bank for the euro and administers monetary policy within the Eurozone, which comprises 19 member states of the European Union and is one of the largest monetary areas in the world.

• Donald Trump - 45th and 47th U.S. President

  Donald John Trump is an American politician, media personality, and businessman who is the 47th president of the United States. A member of the Republican Party, he served as the 45th president from 2017 to 2021.

• White House - Official residence and office of the President of the United States

  The White House is the official residence and workplace of the president of the United States. Located at 1600 Pennsylvania Avenue NW in Washington, D.C., it has served as the residence of every U.S. president since John Adams in 1800 when the national...

• David Sacks - Entrepreneur

  David Oliver Sacks is an entrepreneur, and investor in internet technology firms. He is general partner of Craft Ventures, a venture capital fund he co-founded in late 2017.

• Gary Marcus - American author

  Gary F. Marcus is an American scientist, author, and entrepreneur who is a professor in the Department of Psychology at New York University and was founder and CEO of Geometric Intelligence, a machine learning company later acquired by Uber.

• United States Department of War - Government department

  The United States Department of Defense is an executive branch department of the federal government charged with coordinating and supervising all agencies and functions of the government directly related to national security and the United States Armed Fo

• Linux Foundation - Non-profit

  The Linux Foundation is a non-profit technology consortium founded in 2000 as a merger between Open Source Development Labs and the Free Standards Group to standardize Linux, support its growth, and promote its commercial adoption.

• Sam Altman - President of Y Combinator

  Samuel H. Altman is an American entrepreneur, investor, programmer, and blogger. He is the CEO of OpenAI and the former president of Y Combinator.