Brief

In early 2026, a series of nine coordinated cyberattacks, driven by LLM-powered agents, successfully breached over 600 enterprise firewalls. These autonomous systems discovered and exploited zero-day vulnerabilities at machine speed, utilizing AI assistants for covert command and control. The attacks highlighted a critical shift where AI interfaces became active threats, outpacing traditional security measures and human-operated defenses. AI

Researchers have successfully replicated Anthropic's Mythos findings using publicly available AI models like GPT-5.4 and Claude Opus 4.6. This suggests that advanced AI capabilities for discovering software vulnerabilities are no longer exclusive to frontier labs and are becoming accessible through public models. The focus for defenders should now shift from the exclusivity of these tools to validating and operationalizing AI-generated security insights. AI

Anthropic has developed a new AI model named Claude Mythos, which demonstrates significant advancements in benchmark performance, particularly in identifying software vulnerabilities. Due to its advanced capabilities in finding and exploiting security flaws, Anthropic has opted not to release Mythos publicly. Instead, the company is providing limited access to select organizations through "Project Glasswing" to aid in cybersecurity research and vulnerability discovery, alongside a substantial commitment to open-source security initiatives. AI