Anthropic's Claude Mythos roughly halves the security of post-quantum signature candidate HAWK
Anthropic published two Claude Mythos cryptanalysis results on July 28, 2026, including a key-recovery attack that roughly halves HAWK's security. According to a July 29, 2026 blog post, HAWK is a proposed post-quantum signature scheme, and the companion AES result trims an old attack on a weakened cipher and leaves deployed AES as it was.
Publishers:blog.cryptographyengineering.com
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher Anthropic's OSS Scanner routes Mythos findings to maintainers ahead of its own review queue
Anthropic's OSS Scanner sends maintainers Mythos findings before its researchers review them, with about 6,000 of 29,000-plus candidates triaged. The service is free and opt-in, and reports carry reproduction steps and proposed fixes where available.
Reality
- Evidence55
- Adoption30
- Hype gap+15
- Incentives55
- Confidence58
Bank of America CEO Brian Moynihan said 1,000 contractors hired in the second quarter to patch AI-exposed software flaws remain, on top of 3,000 staff. The headcount can anchor a budget; the dollar figure released with it cannot.
Perspective Coverage
9 publishers
- Builder
- Builder 24%
- Operator
- Operator 42%
- Investor
- Investor 34%
Reality
- Evidence58
- Adoption50
- Hype gap+25
- Incentives60
- Confidence65
IMF says frontier AI makes breaking into bank systems cheaper, so more banks may fail in a severe scenario even as profits rise. In cryptobriefing.com's reading, stress tests now have to cover technology risk as well as interest rates and loan defaults.
Perspective Coverage
4 publishers
- Builder
- Builder 9%
- Operator
- Operator 24%
- Investor
- Investor 67%
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+35
- Incentives
- Not scored
- Confidence40
buildOne report1 publisher Confirmed Claude-found open source bugs outnumber upstream patches 11 to 1
Anthropic's Claude flagged more than 29,000 candidate open source vulnerabilities in six months, and upstream projects have patched 516 of them. Maintainers praise the reports, but each fix still ships only as fast as the project that tests and releases it.
Reality
- Evidence55
- Adoption45
- Hype gap+15
- Incentives60
- Confidence55
Anthropic announced a Critical Infrastructure Defense Program that pairs Claude with outside security firms, CrowdStrike among them. Alongside it, Anthropic is running a free, opt-in scanning service for open-source maintainers directly, CyberScoop reported.
Perspective Coverage
9 publishers
- Builder
- Builder 42%
- Operator
- Operator 37%
- Investor
- Investor 21%
Reality
- Evidence66
- Adoption38
- Hype gap+12
- Incentives70
- Confidence64
Anthropic expects more than 90% of the unreviewed vulnerability reports its new OSS Scanner sends to open source maintainers to be real. Opt-in projects get findings faster and take on the work of catching the errors, such as wrong severity ratings.
Perspective Coverage
6 publishers
- Builder
- Builder 52%
- Operator
- Operator 37%
- Investor
- Investor 11%
Reality
- Evidence60
- Adoption35
- Hype gap+15
- Incentives70
- Confidence62
Nethermind and ZEUS applied for Anthropic's OSS Scanner a day after it launched, asking for AI scans of Ethereum client and Bitcoin wallet code. Anthropic had manually checked about 6,000 of the 29,000-plus flaws its models flagged, crypto.news reported, so the teams that get the reports have to judge them.
Reality
- Evidence55
- Adoption12
- Hype gap+20
- Incentives50
- Confidence60
buildConfirmed2 publishers Anthropic has launched OSS Scanner, a free opt-in service that sends open-source maintainers AI vulnerability reports no human has reviewed. The triage Anthropic skips falls to maintainers, so downstream teams should expect more upstream findings that a person still has to confirm.
Reality
- Evidence45
- Adoption20
- Hype gap+10
- Incentives60
- Confidence55
Dario Amodei's pacing framework only slows US labs by as much as their lead over Chinese ones allows. Whether it binds on anyone's capex depends on a decision in Beijing. Beijing has now made it.
Perspective Coverage
8 publishers
- Builder
- Builder 18%
- Operator
- Operator 49%
- Investor
- Investor 33%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+25
- Incentives62
- Confidence65
Pentagon told the BBC it has ceased using Anthropic's products, months after Pete Hegseth gave the department six months to drop them. For federal AI buyers, it shows a vendor designation being carried out even when the tool sits deep inside daily intelligence work.
Perspective Coverage
3 publishers
- Builder
- Builder 24%
- Operator
- Operator 48%
- Investor
- Investor 28%
Reality
- Evidence60
- Adoption35
- Hype gap+10
- Incentives55
- Confidence62
buildConfirmed12 publishers Anthropic tested three AI agents told they had no internet access; they did, and two of the three kept attacking real systems on the open web. Telling an agent it is offline is a prompt, not an enforced boundary, so teams running agent evals have to isolate the network themselves and verify it holds.
Perspective Coverage
12 publishers
- Builder
- Builder 34%
- Operator
- Operator 42%
- Investor
- Investor 24%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+25
- Incentives40
- Confidence50
A judge in the Northern District of California ruled on the merits and struck the designation down on constitutional, statutory and APA grounds. For vendor-risk teams, the lesson is that a federal exclusion can be scoped around and can then evaporate.
Perspective Coverage
7 publishers
- Builder
- Builder 26%
- Operator
- Operator 48%
- Investor
- Investor 26%
Reality
- Evidence85
- Adoption
- Not scored
- Hype gap+10
- Incentives40
- Confidence80
Anthropic says a consultant in Bamako used Claude to engineer a monitoring system scoped to roughly 25 million SIM cards across Mali's three mobile operators. Because the platform ran on other models, it kept running after the ban.
Perspective Coverage
5 publishers
- Builder
- Builder 26%
- Operator
- Operator 53%
- Investor
- Investor 21%
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives65
- Confidence55
Disclosure volume is climbing faster than the process around it. CISA's answer is a framework that describes what a good CVE record is and how the program should be judged on producing one.
Perspective Coverage
3 publishers
- Builder
- Builder 33%
- Operator
- Operator 50%
- Investor
- Investor 17%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+30
- Incentives55
- Confidence66
Vicarius puts a human reviewer and a deterministic judge between its AI-written fixes and production
ScriptAI drafts detection and remediation logic for software flaws that have no vendor patch behind them. Vicarius says the draft, review and verify cycle finishes in under an hour, against weeks by hand. It is live for vRx customers today.
Reality
- Evidence32
- Adoption12
- Hype gap+35
- Incentives80
- Confidence40
Hundreds of mathematicians ask policymakers to consult experts on AI math claims
A run of vulnerability, hacking and mathematics announcements from Anthropic and OpenAI drew fast coverage. The expert re-readings that followed described plagiarism accusations and basic security failures.
Reality
- Evidence34
- Adoption
- Not scored
- Hype gap+26
- Incentives70
- Confidence38
Britain's pre-launch AI safety testing plan lapsed with the government that drafted it
Ministers explored forcing the largest AI companies to submit products for safety testing before launch. The plans lapsed with Starmer's premiership, and the department that was writing them has since been abolished.
Reality
- Evidence58
- Adoption30
- Hype gap+18
- Incentives65
- Confidence55
China's intelligence chief names Claude Mythos and GPT-5.5-Cyber in a state cyber-risk article
Chen Yixin, who runs the Ministry of State Security, cited the two frontier models in the Cyberspace Administration's journal as evidence of a disruptive upgrade in offensive cyber capability, without alleging either was used against China.
Reality
- Evidence62
- Adoption38
- Hype gap+24
- Incentives72
- Confidence58
Pentagon's reported break with Anthropic reaches 90% of classified AI workloads in eight months
Crypto Briefing dates the supply-chain risk designation to early 2026 and the near-complete migration to mid-September. So far it rests on one publisher's account.
Reality
- Evidence16
- Adoption20
- Hype gap+64
- Incentives74
- Confidence58