Anthropic's latest artificial intelligence model, Claude Mythos Preview, has sparked both excitement and concern across the cybersecurity landscape. The general-purpose large language model (LLM) demonstrates remarkable proficiency in computer security tasks, most notably the ability to identify and exploit zero-day vulnerabilities. While Anthropic positions the model as a tool for defenders, questions linger about whether such powerful exploit-writing capabilities can be kept out of the hands of threat actors.

Unveiled on April 7, Mythos Preview was described by Anthropic as a model that "performs strongly across the board, but it is strikingly capable at computer security tasks." According to the company, the model can find and exploit zero-day vulnerabilities in every major operating system and web browser, including subtle and difficult-to-detect flaws. One notable exploit involved a patched 27-year-old vulnerability in OpenBSD, demonstrating the model's ability to leverage even obscure historical weaknesses.

Capabilities and Real-World Implications

The model's exploit capabilities were highlighted through several examples. In one case, Mythos Preview autonomously wrote a web browser exploit that chained together four separate vulnerabilities, executing a complex JIT heap spray to escape both renderer and operating system sandboxes. It also obtained local privilege escalation exploits on Linux and other systems by exploiting race conditions and KASLR-bypasses. Furthermore, it produced a remote code execution exploit for FreeBSD's NFS server, granting full root access to unauthenticated users by splitting a 20-gadget ROP chain over multiple packets.

Anthropic emphasized that these security capabilities emerged as a "downstream consequence" of improving the model's general code and reasoning abilities, rather than being an explicit development goal. The company noted, "The same improvements that make the model substantially more effective at patching vulnerabilities also make it substantially more effective at exploiting them." This dual-use nature is a central challenge for any organization developing advanced AI systems.

For cybersecurity professionals, the implications are significant. Vulnerability discovery and exploitation have traditionally required deep expertise, patience, and manual analysis. If an LLM can automate much of this process, the speed at which both defenders and attackers can operate will increase dramatically. Defenders might patch vulnerabilities faster, but attackers could weaponize them with equal speed, potentially outpacing the ability of organizations to respond.

Project Glasswing: A Defensive Shield

In anticipation of potential misuse, Anthropic introduced Project Glasswing, a collaborative initiative involving major technology companies such as Apple, Amazon Web Services, Microsoft, Palo Alto Networks, and CrowdStrike. The project aims to "reshape cybersecurity" by deploying Mythos Preview for defensive purposes. Anthropic has extended access to more than 40 organizations, allowing them to scan first-party and open source systems for vulnerabilities and to develop patches.

Lee Klarich, chief product and technology officer of Palo Alto Networks, described early results as "compelling" in a public statement. Beyond access, Anthropic committed $100 million in Mythos Preview usage credits to Project Glasswing and $4 million in direct donations to open source security organizations. These investments signal a serious effort to use the model to strengthen global security rather than undermine it.

However, the initiative also raises questions about equity and control. Only a select group of partners can use the model, creating an asymmetry between those who have access and those who do not. Smaller organizations and independent researchers—who often discover critical vulnerabilities—remain excluded unless they are part of the project. This has led to concerns that the model could entrench a security divide where large corporations benefit while smaller entities fall further behind.

Expert Perspectives on Risk and Control

Industry analysts have offered mixed reactions to Anthropic's approach. One senior analyst noted that the introduction of Mythos Preview is partly good public relations, as it positions Anthropic as leading a transformative shift in cybersecurity. It also draws attention to the vulnerability detection gaps that have persisted for decades. However, the analyst warned, "It's a race for defenders to remediate and patch before other AIs, in the wrong hands, discover these zero-days and rapidly write exploits."

The controls in place are designed to restrict access, but no system is foolproof. A principal solution architect at a security firm pointed out that because there is no clear answer for how these tools can stay out of attacker hands, defenders should assume the capability will proliferate. He recommended investing in detection rather than just prevention, identifying behavioral signatures of AI-assisted exploitation, and adopting zero-trust architecture along with aggressive patching cycles.

Another security expert observed a deeper truth: "No one can ever keep anything 100% out of attackers' hands. The best that can be done is to make it more difficult for them to get access to it." This echoes the long-standing reality of cybersecurity—any tool, from penetration testing frameworks to vulnerability scanners, can be repurposed by malicious actors. The question is not whether abuse will occur, but how quickly and effectively defenders can adapt.

Skepticism and the Need for Independent Verification

Despite the impressive claims, some observers urge caution. Since Anthropic controls both the model and the narrative, independent replication of the reported exploits is impossible when the model is not publicly available. A security executive emphasized, "Until independent researchers with access can run their own evaluations, healthy skepticism is the appropriate posture. This is, frankly, another consequence of the restricted access model: the claims can't be tested, so they can't be fully trusted or refuted."

Anthropic did not respond to requests for statistics regarding false positives or error rates, leaving some questions unanswered. The lack of transparency may fuel uncertainty, but it also reflects the delicate balance between openness and safety. Making the model widely available could lead to immediate misuse, while keeping it locked down stifles independent validation.

The broader cybersecurity community is now watching closely. Mythos Preview represents a significant step forward in AI-driven security, but it also presages a future where both offensive and defensive capabilities become dematerialized and accelerated. Organizations must prepare for a landscape where vulnerability discovery and exploitation happen at machine speed, and where the line between friend and foe is drawn not by tools but by intent and governance.

Source: Dark Reading News