Loading story…
Anthropic’s Claude Fable 5 faced twin security and policy controversies after a publicly surfaced 3,826-line system prompt revealed detailed behavioral rules, safety controls, tool use, memory handling, refusal logic, and prompt-injection defenses for the model inside the Claude app. Reporting said the prompt appeared to come from a public GitHub repository rather than a network intrusion, and described Fable 5 as Anthropic’s first public Mythos-class model, with high-risk cyber, bio, and chemistry requests reportedly routed by classifiers to Opus 4.8 and stronger safeguards separating Fable from the more capable Mythos line.
At the same time, U.S. authorities imposed an unprecedented export-control restriction after alleging a jailbreak in Fable 5 could expose advanced cyber capabilities associated with Claude Mythos 5 or Mythos Preview, forcing Anthropic to suspend access for foreign nationals worldwide and then shut access more broadly until mitigations were deployed. Anthropic and outside experts reportedly disputed the severity of the flaw, but access was only gradually restored after the company blocked the jailbreak, while analysts said the action introduced a novel theory that commercial AI model access can constitute an export and raised concerns that frontier AI services may now face sudden regulatory, geopolitical, and availability disruptions.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
Analytics Vidhya reports that a 3,826-line system prompt used to steer Claude Fable 5 inside the Claude app publicly surfaced, reportedly from a public GitHub repository rather than a hack. The leak exposed detailed instructions governing behavior, safety, tools, memory, refusals, and prompt-injection defenses.
In June 2026, the U.S. government took action under a novel export-control theory that forced Anthropic to suspend access to Claude Fable 5 and Claude Mythos 5 for foreign nationals worldwide. The action was tied to an alleged jailbreak of Fable 5 that officials said could expose Mythos cyber capabilities, though Anthropic and outside experts disputed the severity.
Anthropic restored Claude Fable 5 globally on 2026-07-01 after deploying mitigations to block the jailbreak that had prompted the suspension. Recorded Future similarly says access was restored at the end of June.
Cyber Shafarat reports that Anthropic partially restored access to Claude Mythos 5 on 2026-06-26 after the shutdown triggered by the U.S. government action.
Analytics Vidhya says Claude Fable 5 launched on 2026-06-09 as Anthropic's first public Mythos-class model and shares weights with Claude Mythos 5, with safeguards and access controls differentiating them.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
analyticsvidhya.com
Open sourcecybershafarat.com
Open sourcerecordedfuture.com
Open sourceanthropic.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Anthropic launched **Claude Fable 5** as the public, safeguarded version of its new **Mythos 5** model, describing both as configurations of the same underlying system and positioning Mythos 5 as its strongest cyber-capable model to date. In its system card, Anthropic said Fable 5 uses classifiers and fallback behavior to divert high-risk requests to **Claude Opus 4.8**, keeping its cyber performance roughly in line with the older model while Mythos 5 remains restricted to vetted partners through **Project Glasswing**. The company assessed Mythos 5 as a **Tier 1 cyber offense risk**, meaning it can materially assist offensive operations but does not autonomously conduct adaptive cyber campaigns. Soon after release, researcher **Pliny the Liberator** reportedly bypassed Fable 5’s safeguards using a multi-agent jailbreak that combined Unicode obfuscation, long-context manipulation, narrative framing, and decomposition of harmful requests, allegedly eliciting exploit-development and chemistry-related guidance and exposing a leaked system prompt on GitHub. The incident undercut Anthropic’s claim that more than 1,000 hours of external testing had found no universal jailbreaks, while also intensifying criticism from security researchers who said Fable 5’s guardrails were already so broad that they blocked benign work such as reading security blogs, reviewing code, and writing secure software. Anthropic had not publicly responded to the jailbreak claims at the time of reporting.
Jul 12, 2026
The U.S. government lifted export controls on **Anthropic**'s cybersecurity-focused AI models **Fable 5** and **Mythos 5** on July 1, ending a roughly three-week shutdown that began when an unpublished directive — reportedly the first known use of export authorities against AI models rather than chips or hardware — barred access by foreign nationals and gave the company about 90 minutes to take the systems offline worldwide. Officials claimed the models could be jailbroken to review code and help fix software flaws; Anthropic disputed the technical basis, noting the evidence was delivered only verbally, the behavior was narrow and previously known, and comparable capabilities exist in other public models, including **OpenAI GPT-5.5**. Reporting tied the order to Amazon security research and a personal clash between Anthropic leadership and the White House, with the Commerce Department also involved. The shutdown triggered broad industry backlash: more than 100 cybersecurity leaders, academics, and lawmakers urged the administration to restore access, arguing the ban weakened U.S. cyber defense, while unconfirmed reports circulated that Mythos 5 had breached NSA classified systems during testing. Access returned in stages — limited availability for U.S.-government-approved organizations in late June, then full global restoration on July 1 with added safeguards including identity verification and a filter blocking the prompt behavior that prompted the order. The episode is widely viewed as a precedent for treating frontier AI capability itself as an export-controlled technology and as an instrument of statecraft.
Jul 12, 2026
Anthropic restored global access to its **Fable 5** model after temporarily restricting it in response to US government concerns that a jailbreak could enable misuse of the model’s cybersecurity capabilities. The company said Amazon researchers identified a safeguard bypass, prompting Anthropic to redeploy Fable 5 with new classifiers designed to block more cyber-related tasks while reducing false positives. Anthropic also resumed access to **Mythos 5** for a limited set of US organizations and said testing found other, less capable models could identify the same vulnerabilities, suggesting the bypass did not unlock uniquely advanced offensive capability. The episode has intensified scrutiny of how governments and AI vendors assess cyber risk from frontier models. Orion Policy Institute argued that Washington’s temporary ban and reversal exposed a broader weakness in real-world cyber-risk measurement, especially when policymakers must judge whether a model meaningfully increases offensive capability or merely replicates what existing tools can already do. Anthropic said it is now working with the US government and partners including **Amazon, Microsoft, Google, and Glasswing participants** to build a framework for evaluating AI jailbreak severity and determining appropriate response measures.
Jul 11, 2026