Loading story…
Senior U.S. officials are considering giving the Cybersecurity and Infrastructure Security Agency access to Anthropic’s Mythos model so it can coordinate vulnerability scanning across federal civilian agencies, with a focus on finding public-facing weaknesses and other security flaws on government networks. The discussions come as agencies seek clearer direction on how advanced AI models will be used in cyber defense, following a White House push for stronger network security measures and CISA’s role in developing guidance and an AI vulnerability clearinghouse. CISA officials have stressed that AI could accelerate detection and prioritization, but would not replace remediation work, infrastructure modernization, or the reduction of technical debt.
At the same time, the Trump administration has tightened control over Anthropic’s most advanced systems by placing Mythos 5 and Fable 5 under Commerce Department export restrictions, requiring licenses for export, re-export, or transfer to foreign persons. The move reportedly followed national security concerns after claims that Mythos had been jailbroken, and Anthropic said it suspended customer access to the affected models to comply while disputing the government’s rationale. The parallel actions highlight a split U.S. approach to frontier AI: expanding potential domestic cybersecurity use inside government while restricting broader access to the company’s most powerful models.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
9 events from the most recent confirmed update back to the earliest known activity.
According to two sources cited by Nextgov, CISA received full access to Anthropic's Mythos Preview model about a week before the report. The access marked a shift from earlier discussions about possible access, even as federal officials had not yet finalized guidance for how CISA should use the model.
In response to the export-control action, Anthropic said it had to cut off access to Mythos and Fable for all customers to ensure compliance. The company said it believed the situation was a misunderstanding.
Anthropic's Mythos 5 and Fable 5 models were placed under U.S. Commerce Department export controls, requiring licenses for export, re-export, or domestic transfer to foreign persons. The action was conveyed in a licensing letter from Commerce Secretary Howard Lutnick to CEO Dario Amodei.
Following the jailbreak claims, the administration reportedly tried to persuade Anthropic to delay releasing Mythos 5 and Fable 5 but was unsuccessful. This failed effort preceded formal export-control action.
Another company claimed it had successfully jailbroken Mythos, triggering national security concerns inside the Trump administration. The claim became a catalyst for subsequent government action affecting Anthropic's models.
After the executive order, CISA released the binding operational directive referenced in the order. The agency was also tasked to help create a clearinghouse for AI cybersecurity vulnerabilities.
President Donald Trump's recent AI executive order addressed agency access to advanced frontier models and called for a binding operational directive on securing government networks. The order also set the stage for additional federal AI cybersecurity coordination measures.
In early April 2026, Anthropic launched Project Glasswing to give selected private-sector partners beta access to Mythos in a secure environment. The program was later expanded, reflecting growing cybersecurity planning around the model.
Top federal officials were discussing making CISA the central coordinator for vulnerability scanning across federal agencies using Anthropic's Mythos model. According to the report, CISA did not yet use Mythos, but access was considered imminent.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
17 references tracked. Mallory keeps watching after this page renders.
semafor.com
Open sourcemalware.news
Open sourcenextgov.com
Open sourceitpro.com
Open sourceaxios.com
Open sourcenextgov.com
Open sourcenextgov.com
Open sourcedaniel.haxx.se
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CISA is reportedly using Anthropic’s AI model **Mythos** to audit federal software and code repositories for security flaws, with the work led by the agency’s Attack Surface Evaluation team. According to Reuters, the initiative is intended to find and fix weaknesses in internal government systems before they can be exploited by foreign intelligence services or cybercriminals, and early use of the model has already uncovered a large number of vulnerabilities. Officials have not disclosed which agencies or systems were scanned, the scope of the effort, or the severity of the findings. Reporting also indicates the **NSA** has experimented with or used Mythos in classified environments, underscoring broader U.S. government adoption of AI-assisted vulnerability discovery even as Anthropic’s government ties continue to draw policy and oversight scrutiny around safeguards, surveillance, weapons use, and model access restrictions.
Jul 8, 2026
The U.S. government lifted export controls on **Anthropic**'s cybersecurity-focused AI models **Fable 5** and **Mythos 5** on July 1, ending a roughly three-week shutdown that began when an unpublished directive — reportedly the first known use of export authorities against AI models rather than chips or hardware — barred access by foreign nationals and gave the company about 90 minutes to take the systems offline worldwide. Officials claimed the models could be jailbroken to review code and help fix software flaws; Anthropic disputed the technical basis, noting the evidence was delivered only verbally, the behavior was narrow and previously known, and comparable capabilities exist in other public models, including **OpenAI GPT-5.5**. Reporting tied the order to Amazon security research and a personal clash between Anthropic leadership and the White House, with the Commerce Department also involved. The shutdown triggered broad industry backlash: more than 100 cybersecurity leaders, academics, and lawmakers urged the administration to restore access, arguing the ban weakened U.S. cyber defense, while unconfirmed reports circulated that Mythos 5 had breached NSA classified systems during testing. Access returned in stages — limited availability for U.S.-government-approved organizations in late June, then full global restoration on July 1 with added safeguards including identity verification and a filter blocking the prompt behavior that prompted the order. The episode is widely viewed as a precedent for treating frontier AI capability itself as an export-controlled technology and as an instrument of statecraft.
Jul 12, 2026
Anthropic’s **Mythos** vulnerability research model has drawn scrutiny over its potential to dramatically compress exploit development timelines, raising fears that attackers could move from discovery to weaponization in hours or minutes instead of days or months. Healthcare security experts warned that hospitals are particularly exposed because they depend on legacy clinical systems, connected medical devices, and operational technology that are difficult to patch and often lack modern protections. The concern comes as the healthcare and public health sector reportedly endured **460 ransomware attacks in 2025**, the highest total among critical infrastructure sectors in the FBI’s IC3 reporting, intensifying worries about patient safety, service outages, and faster coordinated ransomware campaigns. At the same time, officials and industry leaders are weighing whether Mythos-class tools could strengthen defense by improving anomaly detection, vulnerability prioritization, code and configuration review, legacy device testing, and incident response. In Washington, the Office of Management and Budget said it is **not** currently changing policy to give federal agencies access to Mythos, even as the White House examines the model’s cyber implications and coordinates with providers, industry, and the intelligence community on guardrails for any possible modified release. The debate is unfolding alongside broader friction between Anthropic and the administration, including litigation tied to a Pentagon supply chain risk designation and an order directing agencies to remove Anthropic tools from federal networks.
Jun 29, 2026