
Claude Mythos Preview
Anthropic's frontier cybersecurity AI, restricted from public release via Project Glasswing due to offensive capability risk.
Last refreshed: 13 June 2026 · Appears in 2 active topics
After the Fed summit and the suspension, is Mythos the model that redefined what governments will do to AI?
Timeline for Claude Mythos Preview
Remained suspended entering its second week under Lutnick export directive
AI: Jobs, Power & Money: Anthropic AI ban enters its second weekDisabled globally after Commerce directive alongside Fable 5
AI: Jobs, Power & Money: Washington pulls a live AI modelUS order pulls Anthropic's top models
European Tech SovereigntyMentioned in: GPT-5.5 clears 32-step attack chain; two models in five days
AI: Jobs, Power & MoneyMentioned in: AISI: GPT-5.5 matches Mythos on 32-step attack
AI: Jobs, Power & MoneyWhat is Claude Mythos Preview and why was it not released to the public?
Is the claim that Mythos found thousands of zero-days accurate?
Why did the Federal Reserve hold an emergency meeting about Claude Mythos?
Background
Claude Mythos Preview is Anthropic's most capable cybersecurity AI model, released on 8 April 2026 exclusively to vetted partner organisations through Project Glasswing. The model scored 83.1% on the CyberGym vulnerability reproduction benchmark against 66.6% for Anthropic's previous best, and autonomously identified thousands of zero-day vulnerabilities including a 27-year-old flaw in OpenBSD -- performance that prompted Anthropic to withhold it from public release. Alongside the Glasswing expansion on 7 April, Anthropic published a 244-page Alignment Risk Update and abandoned ASL (AI Safety Level) capability benchmarks in favour of autonomy-focused threat models.
Tom's Hardware published a critical review arguing the "thousands of zero-days" claim rested on only 198 manual reviews, many in outdated software. The challenge was partially answered by the UK's AI Safety Institute (AISI), which published an independent evaluation on 15 April 2026 confirming a 32-step attack chain equivalent to 20 human work-hours -- the first independent verification of Mythos capability. AISI found no single-task superiority, vindicating Tom's Hardware's critique of the headline claim, while the chaining result demonstrated a different and arguably more operationally significant capability.
The US government's reaction was immediate. Treasury Secretary Scott Bessent and Federal Reserve Chair Jerome Powell summoned the CEOs of five major banks to an emergency meeting specifically to discuss Mythos -- the first time federal financial regulators have convened Wall Street leadership over a single AI model. The AISI evaluation published a week later provides Treasury and the Fed with independent technical grounding they lacked on 8 April, when they were acting on Anthropic's own claims alone.
Claude Mythos 5, the general-availability successor to the Preview, launched on 9 June 2026. Three days later, on 12 June, Commerce Secretary Howard Lutnick issued a directive barring all foreign nationals from accessing both Mythos 5 and the companion consumer model Claude Fable 5. The trigger was a rival company's claimed jailbreak: asking Mythos to read a codebase and fix the vulnerabilities it found could be routed toward offensive cyber output. To comply, Anthropic disabled both models globally. Anthropic publicly disputed the action, noting the same jailbreak vector exists in OpenAI's GPT-5.5, which was not suspended. The episode converts the Preview's controlled-release arc into a harder regulatory test: the administration, having studied the model since April, reached in to turn it off when a wider release was attempted.