Loading story…
Anthropic restored global access to its Fable 5 model after temporarily restricting it in response to US government concerns that a jailbreak could enable misuse of the model’s cybersecurity capabilities. The company said Amazon researchers identified a safeguard bypass, prompting Anthropic to redeploy Fable 5 with new classifiers designed to block more cyber-related tasks while reducing false positives. Anthropic also resumed access to Mythos 5 for a limited set of US organizations and said testing found other, less capable models could identify the same vulnerabilities, suggesting the bypass did not unlock uniquely advanced offensive capability.
The episode has intensified scrutiny of how governments and AI vendors assess cyber risk from frontier models. Orion Policy Institute argued that Washington’s temporary ban and reversal exposed a broader weakness in real-world cyber-risk measurement, especially when policymakers must judge whether a model meaningfully increases offensive capability or merely replicates what existing tools can already do. Anthropic said it is now working with the US government and partners including Amazon, Microsoft, Google, and Glasswing participants to build a framework for evaluating AI jailbreak severity and determining appropriate response measures.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Anthropic said access to Mythos 5 had also been restored for a set of US organizations. The company additionally said it was working with the US government and partners including Amazon, Microsoft, Google, and Glasswing participants on a framework for assessing AI jailbreak severity and response.
Anthropic temporarily restricted access to its Fable 5 model after US government concerns about a jailbreak that could enable misuse of the model's cybersecurity capabilities. The company said the issue involved a safeguard bypass method identified by Amazon researchers.
On 2026-07-01, Anthropic restored global availability of Fable 5 after updating the model with new classifiers intended to block more cybersecurity tasks while reducing false positives. Anthropic also said testing showed less capable models could identify the same vulnerabilities and that the technique did not expose unique "Mythos-level" cyber capabilities.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
orionpolicy.org
Open sourcepcmag.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The U.S. government lifted export controls on **Anthropic**'s cybersecurity-focused AI models **Fable 5** and **Mythos 5** on July 1, ending a roughly three-week shutdown that began when an unpublished directive — reportedly the first known use of export authorities against AI models rather than chips or hardware — barred access by foreign nationals and gave the company about 90 minutes to take the systems offline worldwide. Officials claimed the models could be jailbroken to review code and help fix software flaws; Anthropic disputed the technical basis, noting the evidence was delivered only verbally, the behavior was narrow and previously known, and comparable capabilities exist in other public models, including **OpenAI GPT-5.5**. Reporting tied the order to Amazon security research and a personal clash between Anthropic leadership and the White House, with the Commerce Department also involved. The shutdown triggered broad industry backlash: more than 100 cybersecurity leaders, academics, and lawmakers urged the administration to restore access, arguing the ban weakened U.S. cyber defense, while unconfirmed reports circulated that Mythos 5 had breached NSA classified systems during testing. Access returned in stages — limited availability for U.S.-government-approved organizations in late June, then full global restoration on July 1 with added safeguards including identity verification and a filter blocking the prompt behavior that prompted the order. The episode is widely viewed as a precedent for treating frontier AI capability itself as an export-controlled technology and as an instrument of statecraft.
Jul 12, 2026
Anthropic’s **Claude Fable 5** faced twin security and policy controversies after a publicly surfaced **3,826-line system prompt** revealed detailed behavioral rules, safety controls, tool use, memory handling, refusal logic, and prompt-injection defenses for the model inside the Claude app. Reporting said the prompt appeared to come from a public GitHub repository rather than a network intrusion, and described Fable 5 as Anthropic’s first public **Mythos-class** model, with high-risk cyber, bio, and chemistry requests reportedly routed by classifiers to **Opus 4.8** and stronger safeguards separating Fable from the more capable Mythos line. At the same time, U.S. authorities imposed an unprecedented export-control restriction after alleging a jailbreak in Fable 5 could expose advanced cyber capabilities associated with **Claude Mythos 5** or Mythos Preview, forcing Anthropic to suspend access for foreign nationals worldwide and then shut access more broadly until mitigations were deployed. Anthropic and outside experts reportedly disputed the severity of the flaw, but access was only gradually restored after the company blocked the jailbreak, while analysts said the action introduced a novel theory that commercial AI model access can constitute an export and raised concerns that frontier AI services may now face sudden regulatory, geopolitical, and availability disruptions.
Jul 15, 2026
Anthropic said it has globally re-deployed **Claude Fable 5** with updated cybersecurity controls and released new technical details on how the model handles cyber-related prompts. The company said the system uses safety classifiers to sort requests into **prohibited**, **high-risk dual-use**, **low-risk dual-use**, and **benign** categories rather than blocking all security activity, allowing some defensive and educational use while aiming to stop harmful assistance. Anthropic said prohibited requests include malware development, ransomware, wipers, data exfiltration, defense evasion, offensive infrastructure such as `C2`, destructive attacks, and cyber-physical sabotage, and that the model applies a larger safety margin than earlier versions to reduce dangerous outputs even if that increases false positives. Anthropic also published an early draft **Cyber Jailbreak Severity (CJS)** framework, developed with **Glasswing**, to rate AI jailbreaks from `CJS-0` to `CJS-4` based on capability gain, breadth of impact, ease of weaponization, and discoverability. The company said the framework is intended to create a shared vocabulary for assessing jailbreak risk across industry and government, particularly for cases involving high-uplift vulnerability discovery or exploit generation. Anthropic invited external feedback through a dedicated contact channel and launched a **HackerOne** bug bounty program for researchers to report potential cyber jailbreaks affecting Fable 5.
Jul 3, 2026