Scoop: Top U.S. cyber agency doesn't have access to Anthropic's powerful hacking model

TL;DR

The Cybersecurity and Infrastructure Security Agency doesn't have access to Anthropic's powerful new Mythos Preview model, even though some other government agencies are using it, two sources tell Axios. Why it matters: The country's top cyber defense agency, tasked with helping to secure everything from banks to power plants, is being left behind at a time when the industries it works with are deeply concerned about AI-powered cyberattacks overwhelming their defenses. Anthropic decided against a public release of Mythos due to its unprecedented ability to quickly discover and exploit security vulnerabilities. Instead, Anthropic provided it to more than 40 companies and organizations who are now testing it and working to shore up their systems. CISA is not on that list, the sources say. State of play: Earlier this month, an Anthropic official told Axios the company briefed CISA and the C.

Nauti's Take

The fact that Anthropic's Mythos model exists and is being deployed at all signals just how far AI has advanced on offensive security capabilities — that's genuinely significant progress. The real concern: CISA, the agency tasked with defending US infrastructure, is locked out while attackers won't be.

Anyone in critical infrastructure should follow this policy gap closely.

Summary

The Cybersecurity and Infrastructure Security Agency doesn't have access to Anthropic's powerful new Mythos Preview model, even though some other government agencies are using it, two sources tell Axios. Why it matters: The country's top cyber defense agency, tasked with helping to secure everything from banks to power plants, is being left behind at a time when the industries it works with are deeply concerned about AI-powered cyberattacks overwhelming their defenses.

Anthropic decided against a public release of Mythos due to its unprecedented ability to quickly discover and exploit security vulnerabilities. Instead, Anthropic provided it to more than 40 companies and organizations who are now testing it and working to shore up their systems.

CISA is not on that list, the sources say. State of play: Earlier this month, an Anthropic official told Axios the company briefed CISA and the C

Sources