Loading story…
Anthropic announced the Anthropic Cyber Mission, a program combining Claude models, its engineers and threat research with outside cybersecurity expertise to identify and fix vulnerabilities in critical infrastructure and open-source software. The company said it has offered frontier models and technical support to more than half of U.S. states and large critical infrastructure operators, supporting code scanning, patching, incident response and red teaming.
The initiative also includes a free, opt-in scanning service for open-source projects, providing periodic vulnerability reports with proofs of concept, explanations and suggested patches. Anthropic cautioned that reports may contain inaccuracies, making validation important before acting on findings or applying fixes. Its longer-term goals include automating most vulnerability triage and patching and developing new security architectures and coding standards.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
After organizations requested all model-generated findings, including unreviewed results, Anthropic created a free service offering periodic scans with proofs of concept, explanations and suggested patches. The company warned that the faster-delivered reports could contain inaccuracies.
Anthropic announced a program combining Claude models, its engineers and threat research with outside cybersecurity expertise to identify and fix vulnerabilities in critical infrastructure and open-source software. Named participants include CrowdStrike, Dragos, Nozomi Networks, Palo Alto Networks and Rockwell Automation.
Anthropic offered frontier models and technical support to more than half of U.S. states and large critical infrastructure operators. The support covers code scanning, patching, incident response and red teaming.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Anthropic introduced real-time cyber safeguards for its Claude Opus and Sonnet models that automatically block prompts tied to prohibited or high-risk cyber activity, including mass data exfiltration and ransomware development. The company said some dual-use requests, such as vulnerability exploitation or offensive security tooling, may still be permitted through its application-based Cyber Verification Program, which is intended for vetted defensive security professionals and is not currently available for Zero Data Retention users or through Amazon Bedrock and Google Vertex AI. Anthropic also launched a HackerOne program to reward researchers who find high-impact jailbreaks that let Claude Fable 5 generate exploit code, malware, or detailed attack guidance it would normally refuse. The moves come amid broader industry concern that advanced models can sharply reduce the time and skill needed for offensive cyber work, while related reporting tied Anthropic’s vulnerability-discovery efforts to IBM and Red Hat’s new **Project Lightwell**, a $5 billion service aimed at backporting and delivering signed fixes for open-source flaws uncovered faster than enterprises can patch them.
Jul 3, 2026
Anthropic unveiled **Claude Mythos Preview**, an unreleased AI model it says can autonomously discover and exploit severe software vulnerabilities across major operating systems, browsers, open-source projects, and some closed-source targets. The company said the model uncovered thousands of high-severity flaws, including long-lived bugs in **OpenBSD**, **FFmpeg**, Linux kernel privilege-escalation chains, and **`CVE-2026-4747`**, a FreeBSD NFS remote code execution flaw that could enable unauthenticated root access. Anthropic withheld broad release, citing offensive cyber risk, and instead launched **Project Glasswing**, a gated program for roughly 40 to 50 partners such as AWS, Apple, Cisco, Cloudflare, Google, JPMorgan Chase, Microsoft, Mozilla, NVIDIA, and Palo Alto Networks to validate findings, patch affected software, and study defensive uses. Independent and industry assessments broadly agreed Mythos marks a significant advance in AI-enabled cyber capability, though several researchers questioned how much of Anthropic’s headline claims can yet be verified through public CVEs and warned that similar results may be reproducible with cheaper or open models plus strong tooling. The UK AI Security Institute found Mythos achieved a **73%** success rate on expert capture-the-flag tasks and completed a full 32-step simulated enterprise attack in 3 of 10 runs, while Anthropic later reported coordinated disclosure activity spanning **1,596 vulnerabilities across 281 open-source projects** and partners identifying more than **10,000** high- or critical-severity candidates. Governments, financial regulators, and CISO groups in the US, UK, Europe, Canada, and Japan responded with briefings and warnings that AI is compressing the gap between vulnerability discovery and weaponization, leaving remediation, patch governance, and defensive automation as the main bottlenecks.
Aug 31, 2026
Anthropic has made **Claude Mythos 5** available in public beta within **Claude Security** for Claude Enterprise customers, expanding access to an AI model previously withheld from broad release because of its performance in high-risk cyber domains. The company said the model operates only through constrained defensive workflows that scan customer-selected code repositories, identify potential vulnerabilities, and return findings tagged with **CWE**, severity, confidence, and suggested remediation guidance. Anthropic said customers do not receive unrestricted cyber-tasking access to the model, and any fixes proposed by the system require human review before implementation. Alongside the launch, the company said it is pursuing integrations with cybersecurity partners and introduced the **Defender Advantage Fund (`0xDAF`)**, a **$35 million** initiative intended to support discovery and patching of vulnerabilities in open-source software.
Aug 24, 2026