Loading story…
Reports and commentary have intensified around claims that advanced AI systems can now discover software flaws and, in some cases, produce working exploits for them. A widely discussed account about Anthropic’s reported system, Mythos, said access had been limited to about 40 organizations in critical infrastructure so they could identify and remediate vulnerabilities before the capability spreads more broadly. Security contacts cited in the reporting said the tool was finding a notable number of high-quality bugs, while skeptics cautioned that some of the claims may be overstated.
The debate has focused less on automated bug hunting alone than on the more consequential assertion that AI can bridge the gap from vulnerability discovery to exploit development, including alleged zero-day exploitation against major operating systems and browsers. Separate commentary described the development as a potential “AlphaGo moment” for vulnerability research, arguing that once such capability is demonstrated, containment becomes difficult because model replication, distillation, and parallel advances elsewhere could quickly erode any initial controls. The prospect has sharpened concerns for CISOs that defenders may face a dangerous period in which elite organizations gain access to powerful AI-assisted security tooling while critical infrastructure and legacy environments remain slow to patch, harden, or replace.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
A May 2026 analysis cited recent UK AI Safety Institute evaluations claiming Anthropic's Claude Mythos Preview was the first model to complete the 32-step 'The Last Ones' corporate network attack simulation end to end. The same reporting said OpenAI's GPT-5.5 also showed strong expert-task performance with partial end-to-end success, framing this as a threshold crossing in offensive AI cyber capability.
Hacktron CTO Mohan Pedhapati said he used Anthropic's Opus 4.6 model to develop a full exploit chain against Chrome 138's V8 engine after about a week of iteration, roughly 20 hours of manual guidance, and 2.3 billion tokens costing about $2,283. The report highlighted potential downstream exposure for Electron-based apps such as Discord and Slack that may lag behind current Chromium/V8 releases.
Subsequent analysis characterized the reported Mythos capability as an 'AlphaGo moment' for vulnerability research, highlighting the broader significance of AI-driven vulnerability discovery and exploitation claims.
The reporting describes claims that Mythos can discover a surprising number of high-quality software vulnerabilities and, more significantly, generate working exploits, including for alleged zero-day vulnerabilities in major operating systems and web browsers.
According to the referenced reporting, Anthropic restricted access to its reported AI system, Mythos, to 40 organizations it considers part of critical infrastructure so they could identify and remediate vulnerabilities before broader release or leakage of the capability.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
11 references tracked. Mallory keeps watching after this page renders.
voidsec.com
Open sourcethecyberthrone.in
Open sourcescworld.com
Open sourceresilientcyber.io
Open sourcetrustedsec.com
Open sourcevincenzoiozzo.com
Open sourcevulnu.com
Open sourcelabs.cloudsecurityalliance.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Anthropic unveiled **Claude Mythos Preview**, an unreleased AI model it says can autonomously discover and exploit severe software vulnerabilities across major operating systems, browsers, open-source projects, and some closed-source targets. The company said the model uncovered thousands of high-severity flaws, including long-lived bugs in **OpenBSD**, **FFmpeg**, Linux kernel privilege-escalation chains, and **`CVE-2026-4747`**, a FreeBSD NFS remote code execution flaw that could enable unauthenticated root access. Anthropic withheld broad release, citing offensive cyber risk, and instead launched **Project Glasswing**, a gated program for roughly 40 to 50 partners such as AWS, Apple, Cisco, Cloudflare, Google, JPMorgan Chase, Microsoft, Mozilla, NVIDIA, and Palo Alto Networks to validate findings, patch affected software, and study defensive uses. Independent and industry assessments broadly agreed Mythos marks a significant advance in AI-enabled cyber capability, though several researchers questioned how much of Anthropic’s headline claims can yet be verified through public CVEs and warned that similar results may be reproducible with cheaper or open models plus strong tooling. The UK AI Security Institute found Mythos achieved a **73%** success rate on expert capture-the-flag tasks and completed a full 32-step simulated enterprise attack in 3 of 10 runs, while Anthropic later reported coordinated disclosure activity spanning **1,596 vulnerabilities across 281 open-source projects** and partners identifying more than **10,000** high- or critical-severity candidates. Governments, financial regulators, and CISO groups in the US, UK, Europe, Canada, and Japan responded with briefings and warnings that AI is compressing the gap between vulnerability discovery and weaponization, leaving remediation, patch governance, and defensive automation as the main bottlenecks.
Jun 29, 2026
European and national cyber authorities are warning that AI is rapidly increasing the speed and scale of vulnerability discovery and exploit development, raising the prospect of a sustained remediation crisis. The European Central Bank told about 110 major banks to assess AI-enabled cyber threats and submit action plans by **October 31, 2026**, while the European Systemic Risk Board and European Supervisory Authorities issued parallel warnings on systemic risk from frontier AI models. In France, ANSSI Director General Vincent Strubel told senators that AI-assisted discovery could create a multi-year **"patch wall"**, overwhelming remediation teams even as basic controls such as network segmentation, identity and access management, and timely patching remain the most effective defenses. Industry reporting and vendor disclosures show why regulators are escalating. Mozilla said frontier AI models helped identify **271 vulnerabilities** fixed in Firefox 150 after an earlier run found 22 security-sensitive bugs, while researchers and commentators say LLM-assisted patch diffing can shrink the path from a disclosed `CVE` to a working proof of concept to days or even hours, including for flaws such as `CVE-2025-32433` in Erlang/OTP SSH. At the same time, access controls around advanced cyber-capable models are tightening unevenly: Anthropic expanded its restricted **Project Glasswing** program for Claude Mythos to critical-infrastructure organizations, but open-weight alternatives such as Zhipu AI's **GLM-5.2** are reported to deliver competitive vulnerability-finding performance at lower cost, reinforcing concerns that powerful offensive-relevant capability is spreading faster than most enterprises can patch.
Jul 10, 2026
Anthropic disclosed **Mythos Preview**, an advanced AI model it says can identify and exploit zero-day vulnerabilities at a far higher rate than its Claude Opus 4.6 model, generating working exploits in **72.4 percent** of attempts. The company said the system can find and chain flaws across major operating systems and web browsers, including **remote code execution**, **sandbox escapes**, **local privilege escalation**, and multi-bug exploit paths. Anthropic did not release the model publicly, instead restricting access through **Project Glasswing** for selected partners and organizations to support defensive vulnerability research and responsible disclosure; it said the model has already uncovered thousands of additional high- and critical-severity flaws. At **Black Hat Asia**, RunSybil CEO and former OpenAI security engineer Ari Herbert-Voss said open source AI models can match Mythos-level bug-finding performance when paired with the right orchestration or "scaffolding." He said combining multiple open models can improve coverage because different systems surface different classes of flaws, offering a form of defense in depth, while also addressing the cost and limited availability of proprietary tools like Mythos. Herbert-Voss added that human experts remain necessary to coordinate model workflows and validate large volumes of AI-generated findings, but said economic pressure and operational advantages are likely to drive broader adoption of AI-assisted vulnerability discovery across security teams.
Jun 29, 2026