Anthropic's AI Security Tool Mythos Reportedly Accessed by Unauthorized Group via Third-Party Vendor
Bloomberg reports that an unidentified private online forum has obtained access to Anthropic's exclusive cybersecurity AI tool Mythos through a third-party vendor. The group, active on a Discord channel focused on unreleased AI models, gained entry on the same day Mythos was publicly announced. They used knowledge of Anthropic's model format to locate the tool online and have been regularly using it since access was obtained, providing Bloomberg with screenshots and live demonstrations as evidence. Anthropic confirmed it is investigating reports of unauthorized access through a vendor environment but stated no evidence suggests its own systems have been impacted. The company designed Mythos as an enterprise security product that could potentially be weaponized as a hacking tool if misused. As part of Project Glasswing, Mythos was released to a limited number of vendors including Apple to prevent use by malicious actors. One group member interviewed by Bloomberg is employed at a third-party contractor working for Anthropic. The unauthorized users claim interest in experimenting with new models rather than causing harm.
Key facts
- An unauthorized group accessed Anthropic's AI cybersecurity tool Mythos through a third-party vendor
- Bloomberg reported the access occurred via a private online forum whose members remain unidentified
- The group gained access on the same day Mythos was publicly announced
- Anthropic is investigating but found no evidence its own systems were impacted
- The group provided Bloomberg with screenshots and live demonstrations of Mythos
- Mythos was released to select vendors including Apple under Project Glasswing
- The tool is designed for enterprise security but could be weaponized as a hacking tool
- Group members participate in a Discord channel focused on unreleased AI models
Entities
Institutions
- Anthropic
- Bloomberg
- TechCrunch
- Apple
- Discord