Project
Anthropic's program giving vetted partners Claude Mythos Preview access to find software vulnerabilities; later folded into its Cyber Verification Program.
VulnCheck counted Chrome CVEs up 563% and GitHub-issued CVEs up 476% year to date in a May 14, 2026 post. It calls the rise consistent with AI-assisted bug finding, but whether the volume lasts is unknown, so exploitation data still sets patch order.
Reality
Anthropic's OSS Scanner sends maintainers Mythos findings before its researchers review them, with about 6,000 of 29,000-plus candidates triaged. The service is free and opt-in, and reports carry reproduction steps and proposed fixes where available.
Reality
Bank of America CEO Brian Moynihan said 1,000 contractors hired in the second quarter to patch AI-exposed software flaws remain, on top of 3,000 staff. The headcount can anchor a budget; the dollar figure released with it cannot.
Perspective Coverage
9 publishersReality
Nozomi Networks Labs reports persistent abuse of weak or default credentials and exposed industrial and IoT assets between June and August 2026. Faster exploit cycles and botnets that generate opportunistic traffic add volume on top, the vendor says.
Reality
Chainguard says its Mythos harness found a vLLM flaw, left in the public tracker for four months, that lets one client force another client's output. Versions before v0.31.0 are affected, and nothing is logged when the forced answer returns.
Reality
Anthropic announced a Critical Infrastructure Defense Program that pairs Claude with outside security firms, CrowdStrike among them. Alongside it, Anthropic is running a free, opt-in scanning service for open-source maintainers directly, CyberScoop reported.
Perspective Coverage
9 publishersReality
Anthropic's Cyber Mission puts Claude models, engineers and funding behind bug fixing, after Glasswing finds often waited months for a patch. Its free OSS Scanner sends unreviewed reports that Anthropic expects to be over 90% accurate, so it suits maintainers who have time to verify them.
Reality
Anthropic expects more than 90% of the unreviewed vulnerability reports its new OSS Scanner sends to open source maintainers to be real. Opt-in projects get findings faster and take on the work of catching the errors, such as wrong severity ratings.
Perspective Coverage
6 publishersReality
Nethermind and ZEUS applied for Anthropic's OSS Scanner a day after it launched, asking for AI scans of Ethereum client and Bitcoin wallet code. Anthropic had manually checked about 6,000 of the 29,000-plus flaws its models flagged, crypto.news reported, so the teams that get the reports have to judge them.
Reality
Anthropic's Cyber Verification Program now gives security teams three tiers of access to Claude Opus 5.5, Sonnet 5.5 and Mythos 5.1 for defensive work. Getting in takes organization verification and control attestations, and a team learns its tier only from its own admin view.
Perspective Coverage
14 publishersReality
JPMorgan Chase CEO Jamie Dimon told Bloomberg TV that risks from AI went up 10-fold after Anthropic's Mythos model. The figure comes without a stated baseline, and the response on record is hundreds of staff working full time on JPMorgan's defenses since it got early access in April.
Perspective Coverage
4 publishersReality
Anthropic will let verified organisations run "high risk offensive testing" with Claude Mythos 5.1 and its other top models, alongside the US government. Access goes to a select group, so whoever draws up the vetting list now decides which defenders can use the company's strongest cyber model.
Reality
Cohesity CEO Sanjay Poonen wants the 200 exabytes of backups it guards for about 12,000 customers put to work feeding AI. Taking up the offer means opening the copy a company keeps for recovery to AI tools that someone has to supervise.
Reality
VulnCheck says a China-based actor began targeting vulnerable U.S. Rejetto HFS servers on October 1, exploiting CVE-2026-61500 to forge admin sessions. The fix shipped in July as version 3.2.1. Exposed instances that have not updated are reachable now.
Perspective Coverage
4 publishersReality
Anthropic says Zhipu's freely downloadable GLM-5.3 built working V8 exploits in 50 of 410 tries, against 56 for its own restricted Claude Mythos Preview. With the weights public, its safeguards come off cheaply, so a lab that restricts its own model no longer keeps the capability out of reach.
Perspective Coverage
4 publishersReality
Horizon3 used Anthropic's Mythos model to find CVE-2026-61500, a chain that forges Rejetto HFS admin sessions and reaches remote code execution. The firm expects frontier models to make deeper, less reliable bug classes worth weaponizing at scale.
Reality
Palo Alto Networks pointed Anthropic's unreleased Mythos at its own systems and found 75 vulnerabilities in a month, against a usual rate below five. The defense business it built on that result depends on Anthropic's model and on customers choosing a security vendor over the lab.
Reality
Anthropic says Zhipu AI's downloadable GLM-5.3 builds cyber exploits on its own, with safeguards that fail against simple attacks up to 100% of the time. It puts a capability once confined to gated frontier models within anyone's reach.
Reality
Apache Software Foundation teams scanned 230 repositories with Anthropic's Claude Mythos 5 over three days in August 2026. Findings now go to the projects that own the code through the foundation's official disclosure path, and remediation has started.
Reality
A vendor coalition has formed around OpenAI's call for a surge in cyber defense. What an underfunded defender can actually requisition from it today is one subsidized model tier, on terms the letter does not state.
Perspective Coverage
5 publishersReality
Invest · September 1, 2026 · Confirmed2 publishers
Invest · September 2, 2026 · Confirmed5 publishers
Product · August 19, 2026 · Confirmed2 publishers
Leadership · August 17, 2026 · Confirmed3 publishers