Prem Nawaz Khan

So you know the company that makes Claude, the AI you’ve probably used? They just built something so dangerous they refuse to release it to the public. It is called Claude Mythos, and here is the insane part: Anthropic did not train it to be a hacking tool, the capabilities just appeared on their own as a byproduct of making it smarter. They looked at what it could do and said we cannot let anyone have this. What can it do? It found thousands of previously unknown security vulnerabilities in every major operating system and every major web browser. Including a 27-year-old bug in OpenBSD, one of the most secure operating systems ever built, that the entire global security community missed for nearly three decades. An Anthropic engineer with zero security training asked it to find a remote code execution vulnerability before going to bed, woke up the next morning and had a complete working exploit waiting. Over 99% of the vulnerabilities it found were still unpatched at the time of the breach. So instead of releasing it, Anthropic gave access to 40 companies including Apple, Google, Microsoft, and JPMorgan under Project Glasswing, backed by $100 million in usage credits. The idea being: let defenders use it before attackers get something similar. Then unauthorized users got in anyway, on the exact same day it was announced, exploiting a contractor's credentials and making educated guesses about the model's location. The U.S. Treasury Secretary called an emergency meeting with Goldman Sachs, Citi, and other big banks specifically because of Mythos. Mozilla used it to find and patch 271 Firefox vulnerabilities in weeks. The UK's AI Security Institute confirmed it is the first AI model to complete a simulated full network takeover. And OpenAI announced a similar model just one week later. We are in a completely different era with this stuff and most people have no idea. Source: Anthropic, TechCrunch, Bloomberg