Key Takeaways<\/h2>\n\n- Claude Mythos scores 83.1 percent on the CyberGym benchmark for vulnerability detection – Opus 4.6 reaches 66.6 percent (Anthropic, April 2026).<\/li>\n
- The model uncovered critical zero-day vulnerabilities in OpenBSD (27 years old, remote crash), FFmpeg (16 years old, missed in 5 million tests), and the Linux kernel (privilege escalation via DRR scheduler).<\/li>\n
- Mythos chains individual vulnerabilities into complete attack paths-a capability previously reserved for elite penetration testers.<\/li>\n
- Project Glasswing grants controlled access to over 40 organizations. Patches are already being rolled out.<\/li>\n
- All findings will be disclosed within 90 days. 4 million US dollars are allocated to open-source security projects.<\/li>\n<\/ul>\n
The Findings in Detail<\/h2>\n
Three findings reveal the scale.<\/p>\n
\n27 Years<\/div>\nDuration of the oldest vulnerability found by Mythos (OpenBSD SACK Implementation)<\/div>\nSource: Anthropic, red.anthropic.com, April 2026<\/div>\n<\/div>\nA vulnerability existed for 27 years within the SACK (Selective Acknowledgment) implementation of the TCP stack-a mechanism for handling packet loss. It enables a remote Denial of Service attack against any OpenBSD server. OpenBSD is regarded as one of the most secure operating systems. Its code is regularly manually audited by experienced security researchers. Nevertheless, the bug remained undetected.<\/p>\n
FFmpeg-the multimedia library that provides video and audio processing on practically every platform-contained a bug in the H.264 codec. 16 years old. 5 million automated tests had traversed the affected code section without triggering the vulnerability. FFmpeg confirmed and patched the bug following the report by Anthropic.<\/p>\n
Within the Linux kernel, Mythos identified several privilege escalation paths, including a vulnerability in the DRR (Deficit Round Robin) scheduler-an algorithm for distributing network bandwidth. An unprivileged user could obtain full root privileges through this pathway.<\/p>\n
Why the Model Isn’t a Security AI – And Still Better Than Most<\/h2>\n
Anthropic did not train Mythos specifically for security. The model was optimized as a coding model. On SWE-bench Verified, it achieves 93.9 percent. Opus 4.6 scores 80.8 percent.<\/p>\n
The security capabilities are an emergent property. Anyone who understands code at this level inherently knows where code is vulnerable. The model finds not only individual vulnerabilities. It chains several smaller bugs into complete attack paths-three, four, five vulnerabilities combined into a functioning exploit. This is the workflow of an experienced red-team operator, not a scanner.<\/p>\n
On the CyberGym benchmark, Mythos reaches 83.1 percent. Opus scores 66.6 percent. The gap is not incremental. It is a generational leap.<\/p>\n
Project Glasswing: Controlled Distribution<\/h2>\n
Anthropic has opted against a public release. Instead, Mythos operates under the codename Glasswing within a controlled environment.<\/p>\n
The partner list includes: AWS, Apple, Google, Microsoft, NVIDIA, Cisco, CrowdStrike, JPMorgan Chase, Palo Alto Networks, Broadcom, the Linux Foundation, and over 30 additional organizations.<\/p>\n
When a tool identifies vulnerabilities in the infrastructure powering the internet, the operators of that infrastructure must receive access first-not the general public, and certainly not potential attackers.<\/p>\n
Three concrete commitments: All findings will be shared publicly within 90 days. $100 million in usage credits are available to partners. $4 million goes directly to open-source security groups. Patches are already rolling out. FFmpeg has confirmed and fixed the 16-year-old bug. The OpenBSD and Linux kernel fixes are currently being deployed.<\/p>\n
What This Means for Security Teams<\/h2>\n
The Consequences Across Three Time Horizons.<\/p>\n
Short-Term: Over the Coming Weeks, deploy regular updates for all affected systems. The Glasswing patches will arrive via the standard update channels of cloud providers and operating system distributions. Those with automatic updates enabled are largely protected.<\/p>\n
Mid-Term: Within the Next 3 to 12 Months, the benchmark for vulnerability assessments is shifting. When an AI identifies bugs that 5 million automated tests and decades of manual audits overlooked, classic fuzzing is no longer sufficient as a standalone testing method. Security teams should evaluate AI-driven code analysis within their tool stacks.<\/p>\n
Long-Term: Each successive generation of coding models will develop comparable security capabilities. The ability to uncover complex logical vulnerabilities and chain them into exploits will become a standard feature of frontier models. This shifts the balance of power: defenders gain access to tools previously reserved for elite attackers.<\/p>\n
The Uncomfortable Truth: The same technology will also be accessible to attackers once comparable open-source models emerge. The head start Glasswing gives defenders is time-limited. The 90-day disclosure deadline-a common industry standard-ensures patches are deployed before technical details become public.<\/p>\n
Situation Assessment<\/h2>\n
Anthropic has set a precedent. An AI laboratory has developed a model too powerful for an uncontrolled release, opting for a defender-first approach rather than either locking it away entirely or making it public.<\/p>\n
Whether this precedent stands depends on whether other labs follow suit. OpenAI, Google DeepMind, and Meta are likewise training next-generation coding models. If coding proficiency automatically translates into security expertise, every frontier model will become a potential tool for both attack and defense.<\/p>\n
The pertinent question is not whether AI-driven vulnerability detection is arriving. It is already here. The real question is whether your organization can patch quickly enough when the next wave of AI-discovered zero-day vulnerabilities emerges.<\/p>\n
Frequently Asked Questions<\/h2>\n
Every question is locked. A tap unlocks the answer.<\/p>\n\nWhat is Claude Mythos?<\/strong><\/summary>\nClaude Mythos represents Anthropic\u2019s next generation of models. It achieves 93.9 percent on SWE-bench Verified and 83.1 percent on the CyberGym benchmark. Crucially, its security capabilities are not a dedicated training feature, but a byproduct of superior code competence.<\/p>\n<\/details>\n\nWhy isn\u2019t Anthropic releasing the model publicly?<\/strong><\/summary>\nA model capable of identifying vulnerabilities in critical infrastructure and chaining them into exploits could become a weapon in the wrong hands. Via Project Glasswing, critical infrastructure operators receive priority access, ensuring patches are deployed before vulnerabilities become public knowledge.<\/p>\n<\/details>\n\nAre my systems affected?<\/strong><\/summary>\nIf you are running OpenBSD, FFmpeg, or Linux: potentially, yes. Patches are already available or rolling out. Apply regular updates immediately. Organizations utilizing cloud services from AWS, Azure, or GCP will automatically benefit from the providers\u2019 Glasswing scans.<\/p>\n<\/details>\n\nDo security teams need to act now?<\/strong><\/summary>\nIn the short term: apply updates. In the medium term: evaluate AI-assisted code analysis within your tool stack. The benchmark for vulnerability assessments is shifting. Traditional fuzzing alone is no longer sufficient against the class of bugs identified by Mythos.<\/p>\n<\/details>\n\nWill this technology also be available to attackers?<\/strong><\/summary>\nYes, in the long term. Comparable open-source models will likely develop similar capabilities. The head start Glasswing provides defenders is time-limited. The 90-day disclosure window ensures patches are deployed before technical details become public.<\/p>\n<\/details>\n
\nEditorial Reading Recommendations<\/h2>\n\n- Deepfake Attacks on the C-Suite: How AI-Generated Voices Steal Millions<\/a><\/li>\n
- Email Authentication: Properly Configuring SPF, DKIM, and DMARC<\/a><\/li>\n
- Anthropic: Claude Mythos Preview – Official Announcement<\/a><\/li>\n<\/ul>\n<\/div>\n\n<\/p>\n
Editor’s Picks<\/h3>\n
![\"\"](\"https:\/\/www.securitytoday.de\/wp-content\/uploads\/2026\/04\/st-art4-pexels-17194838-250x167.jpg\")
<\/span>Editor’s Pick<\/span>Deepfake Voices Stealing Millions from Executive Suites<\/span><\/span><\/a>![\"\"](\"https:\/\/www.securitytoday.de\/wp-content\/uploads\/2026\/04\/st-art5-pexels-7439124-250x167.jpg\")
<\/span>Editor’s Pick<\/span>Email Authentication: Configure SPF, DKIM, and DMARC Correctly<\/span><\/span><\/a>![\"\"](\"https:\/\/www.securitytoday.de\/wp-content\/uploads\/2026\/07\/ransomware-post-mortem-produktionsunternehmen-lessons-2026-cover-hero-250x143.jpg\")
<\/span>Editor’s Pick<\/span>Ransomware Post-Mortem: What Manufacturers Learned From Attacks<\/span><\/span><\/a>![\"\"](\"https:\/\/www.securitytoday.de\/wp-content\/uploads\/2026\/04\/nis2-meldewege-control-room-250x166.jpg\")
<\/span>Editor’s Pick<\/span>NIS2 Crisis 2026: 3 Reporting Channels for First-Hour Incidents<\/span><\/span><\/a><\/p>\nMore from the MBF Media Network<\/h3>\n
![\"\"](\"https:\/\/www.securitytoday.de\/wp-content\/uploads\/2026\/07\/net-reshoring-statt-offshore-wie-deutsche-mi-32276654.jpg\")
<\/span>cloudmagazin<\/span>Reshoring Over Offshore: German SMEs Rewire Cloud Supply Chains<\/span><\/span><\/a>![\"\"](\"https:\/\/www.securitytoday.de\/wp-content\/uploads\/2026\/07\/net-industrielle-waermewende-chemie-prozessw-62220657-250x141.jpg\")
<\/span>MyBusinessFuture<\/span>Decarbonizing Industrial Heat: How Chemical Sites Are Going Green<\/span><\/span><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Anthropic has built an AI model that finds vulnerabilities faster than most security teams. Claude Mythos discovered a 27-year-old bug in OpenBSD and several privilege escalation paths in the Linux kernel. The situation assessment.","protected":false},"author":55,"featured_media":15267,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_focuskw":"AI security testing","_yoast_wpseo_title":"Claude Mythos: Situation Assessment for Security Teams","_yoast_wpseo_metadesc":"Claude Mythos finds 27-year-old bugs in OpenBSD and privilege escalation in the Linux kernel. Situation assessment: What security teams should do now.","_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_meta-robots-adv":"","_yoast_wpseo_canonical":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_opengraph-image":"","_yoast_wpseo_opengraph-image-id":0,"_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_yoast_wpseo_twitter-image":"","_yoast_wpseo_twitter-image-id":0,"_evm_slot_owner":"","evm_cvss":0,"evm_risk":0,"evm_casefile":"","evm_primary_cve":"","evm_pin_until":0,"evm_external_preview_token":"","evm_external_preview_expires":"","_evm_translation_lang":"","featured_post":0,"featured_post_sortierung":0,"_wp_old_slug":[],"footnotes":""},"categories":[255,259],"tags":[],"class_list":["post-11813","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-praxis-umsetzung-en","category-strategie-governance-en"],"evm_reading_time_minutes":7,"wpml_language":"en","wpml_translation_of":11803,"_links":{"self":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts\/11813","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/comments?post=11813"}],"version-history":[{"count":6,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts\/11813\/revisions"}],"predecessor-version":[{"id":21615,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts\/11813\/revisions\/21615"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/media\/15267"}],"wp:attachment":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/media?parent=11813"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/categories?post=11813"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/tags?post=11813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
The Findings in Detail<\/h2>\n
Three findings reveal the scale.<\/p>\n
A vulnerability existed for 27 years within the SACK (Selective Acknowledgment) implementation of the TCP stack-a mechanism for handling packet loss. It enables a remote Denial of Service attack against any OpenBSD server. OpenBSD is regarded as one of the most secure operating systems. Its code is regularly manually audited by experienced security researchers. Nevertheless, the bug remained undetected.<\/p>\n
FFmpeg-the multimedia library that provides video and audio processing on practically every platform-contained a bug in the H.264 codec. 16 years old. 5 million automated tests had traversed the affected code section without triggering the vulnerability. FFmpeg confirmed and patched the bug following the report by Anthropic.<\/p>\n
Within the Linux kernel, Mythos identified several privilege escalation paths, including a vulnerability in the DRR (Deficit Round Robin) scheduler-an algorithm for distributing network bandwidth. An unprivileged user could obtain full root privileges through this pathway.<\/p>\n
Why the Model Isn’t a Security AI – And Still Better Than Most<\/h2>\n
Anthropic did not train Mythos specifically for security. The model was optimized as a coding model. On SWE-bench Verified, it achieves 93.9 percent. Opus 4.6 scores 80.8 percent.<\/p>\n
The security capabilities are an emergent property. Anyone who understands code at this level inherently knows where code is vulnerable. The model finds not only individual vulnerabilities. It chains several smaller bugs into complete attack paths-three, four, five vulnerabilities combined into a functioning exploit. This is the workflow of an experienced red-team operator, not a scanner.<\/p>\n
On the CyberGym benchmark, Mythos reaches 83.1 percent. Opus scores 66.6 percent. The gap is not incremental. It is a generational leap.<\/p>\n
Project Glasswing: Controlled Distribution<\/h2>\n
Anthropic has opted against a public release. Instead, Mythos operates under the codename Glasswing within a controlled environment.<\/p>\n
The partner list includes: AWS, Apple, Google, Microsoft, NVIDIA, Cisco, CrowdStrike, JPMorgan Chase, Palo Alto Networks, Broadcom, the Linux Foundation, and over 30 additional organizations.<\/p>\n
When a tool identifies vulnerabilities in the infrastructure powering the internet, the operators of that infrastructure must receive access first-not the general public, and certainly not potential attackers.<\/p>\n
Three concrete commitments: All findings will be shared publicly within 90 days. $100 million in usage credits are available to partners. $4 million goes directly to open-source security groups. Patches are already rolling out. FFmpeg has confirmed and fixed the 16-year-old bug. The OpenBSD and Linux kernel fixes are currently being deployed.<\/p>\n
What This Means for Security Teams<\/h2>\n
The Consequences Across Three Time Horizons.<\/p>\n
Short-Term: Over the Coming Weeks, deploy regular updates for all affected systems. The Glasswing patches will arrive via the standard update channels of cloud providers and operating system distributions. Those with automatic updates enabled are largely protected.<\/p>\n
Mid-Term: Within the Next 3 to 12 Months, the benchmark for vulnerability assessments is shifting. When an AI identifies bugs that 5 million automated tests and decades of manual audits overlooked, classic fuzzing is no longer sufficient as a standalone testing method. Security teams should evaluate AI-driven code analysis within their tool stacks.<\/p>\n
Long-Term: Each successive generation of coding models will develop comparable security capabilities. The ability to uncover complex logical vulnerabilities and chain them into exploits will become a standard feature of frontier models. This shifts the balance of power: defenders gain access to tools previously reserved for elite attackers.<\/p>\n
The Uncomfortable Truth: The same technology will also be accessible to attackers once comparable open-source models emerge. The head start Glasswing gives defenders is time-limited. The 90-day disclosure deadline-a common industry standard-ensures patches are deployed before technical details become public.<\/p>\n
Situation Assessment<\/h2>\n
Anthropic has set a precedent. An AI laboratory has developed a model too powerful for an uncontrolled release, opting for a defender-first approach rather than either locking it away entirely or making it public.<\/p>\n
Whether this precedent stands depends on whether other labs follow suit. OpenAI, Google DeepMind, and Meta are likewise training next-generation coding models. If coding proficiency automatically translates into security expertise, every frontier model will become a potential tool for both attack and defense.<\/p>\n
The pertinent question is not whether AI-driven vulnerability detection is arriving. It is already here. The real question is whether your organization can patch quickly enough when the next wave of AI-discovered zero-day vulnerabilities emerges.<\/p>\n
Frequently Asked Questions<\/h2>\n
Every question is locked. A tap unlocks the answer.<\/p>\n Claude Mythos represents Anthropic\u2019s next generation of models. It achieves 93.9 percent on SWE-bench Verified and 83.1 percent on the CyberGym benchmark. Crucially, its security capabilities are not a dedicated training feature, but a byproduct of superior code competence.<\/p>\n<\/details>\n A model capable of identifying vulnerabilities in critical infrastructure and chaining them into exploits could become a weapon in the wrong hands. Via Project Glasswing, critical infrastructure operators receive priority access, ensuring patches are deployed before vulnerabilities become public knowledge.<\/p>\n<\/details>\n If you are running OpenBSD, FFmpeg, or Linux: potentially, yes. Patches are already available or rolling out. Apply regular updates immediately. Organizations utilizing cloud services from AWS, Azure, or GCP will automatically benefit from the providers\u2019 Glasswing scans.<\/p>\n<\/details>\n In the short term: apply updates. In the medium term: evaluate AI-assisted code analysis within your tool stack. The benchmark for vulnerability assessments is shifting. Traditional fuzzing alone is no longer sufficient against the class of bugs identified by Mythos.<\/p>\n<\/details>\n Yes, in the long term. Comparable open-source models will likely develop similar capabilities. The head start Glasswing provides defenders is time-limited. The 90-day disclosure window ensures patches are deployed before technical details become public.<\/p>\n<\/details>\nWhat is Claude Mythos?<\/strong><\/summary>\n
Why isn\u2019t Anthropic releasing the model publicly?<\/strong><\/summary>\n
Are my systems affected?<\/strong><\/summary>\n
Do security teams need to act now?<\/strong><\/summary>\n
Will this technology also be available to attackers?<\/strong><\/summary>\n
Editorial Reading Recommendations<\/h2>\n
\n
Editor’s Picks<\/h3>\n
<\/span>Editor’s Pick<\/span>Deepfake Voices Stealing Millions from Executive Suites<\/span><\/span><\/a><\/span>Editor’s Pick<\/span>Email Authentication: Configure SPF, DKIM, and DMARC Correctly<\/span><\/span><\/a><\/span>Editor’s Pick<\/span>Ransomware Post-Mortem: What Manufacturers Learned From Attacks<\/span><\/span><\/a><\/span>Editor’s Pick<\/span>NIS2 Crisis 2026: 3 Reporting Channels for First-Hour Incidents<\/span><\/span><\/a><\/p>\nMore from the MBF Media Network<\/h3>\n
<\/span>cloudmagazin<\/span>Reshoring Over Offshore: German SMEs Rewire Cloud Supply Chains<\/span><\/span><\/a><\/span>MyBusinessFuture<\/span>Decarbonizing Industrial Heat: How Chemical Sites Are Going Green<\/span><\/span><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Anthropic has built an AI model that finds vulnerabilities faster than most security teams. Claude Mythos discovered a 27-year-old bug in OpenBSD and several privilege escalation paths in the Linux kernel. The situation assessment.","protected":false},"author":55,"featured_media":15267,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_focuskw":"AI security testing","_yoast_wpseo_title":"Claude Mythos: Situation Assessment for Security Teams","_yoast_wpseo_metadesc":"Claude Mythos finds 27-year-old bugs in OpenBSD and privilege escalation in the Linux kernel. Situation assessment: What security teams should do now.","_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_meta-robots-adv":"","_yoast_wpseo_canonical":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_opengraph-image":"","_yoast_wpseo_opengraph-image-id":0,"_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_yoast_wpseo_twitter-image":"","_yoast_wpseo_twitter-image-id":0,"_evm_slot_owner":"","evm_cvss":0,"evm_risk":0,"evm_casefile":"","evm_primary_cve":"","evm_pin_until":0,"evm_external_preview_token":"","evm_external_preview_expires":"","_evm_translation_lang":"","featured_post":0,"featured_post_sortierung":0,"_wp_old_slug":[],"footnotes":""},"categories":[255,259],"tags":[],"class_list":["post-11813","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-praxis-umsetzung-en","category-strategie-governance-en"],"evm_reading_time_minutes":7,"wpml_language":"en","wpml_translation_of":11803,"_links":{"self":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts\/11813","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/comments?post=11813"}],"version-history":[{"count":6,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts\/11813\/revisions"}],"predecessor-version":[{"id":21615,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts\/11813\/revisions\/21615"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/media\/15267"}],"wp:attachment":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/media?parent=11813"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/categories?post=11813"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/tags?post=11813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}