Can AI systems autonomously discover major cyber vulnerabilities without being designed to?
Core argument: Anthropic reports that Mythos has detected thousands of high-severity cyber vulnerabilities, some created by chaining together multiple obscure software weaknesses.
Anthropic reports that Mythos has detected thousands of high-severity cyber vulnerabilities, some of them created by chaining together multiple obscure software weaknesses. The remarkable part is that Mythos cyberhacking skills are “emergent” (the byproduct of other goals) since it wasn’t designed specifically for that purpose. In one instance, Mythos solved a corporate network attack simulation estimated to take an expert over 10 hours (no other frontier model had been able to do this), with Anthropic noting that Mythos can chain multiple separate vulnerabilities together to escape the “renderer sandbox” and “operating system sandbox” (security features that isolate JavaScript, HTML and CSS from the operating system, and protect the OS itself). The good news: in a properly configured sandbox with modern patches, Mythos was unable to find any novel exploits.

