Anthropic's Mythos Found Millions of Security Vulnerabilities  🔗 **Source:** [Anthropic's Mythos Found Millions of Security Vulnerabilities](https://share.snipd.com/episode/ced423f7-b431-4b4f-971a-c89b39c6a7d6) ## Highlights - **Model Found Thousands Of Decade-Old Zero Days** - Anthropic's Claude Mythos Preview can detect thousands of long-standing zero-day vulnerabilities across major codebases. - The model found vulnerabilities one to two decades old, prompting Anthropic to withhold public release until fixes are applied. Transcript: Jaeden Schafer It's powered by our newest frontier model, Claude Mythos Preview, which can find software vulnerabilities better than all but the most skilled humans. Okay, there is this crazy project. It's not released to the public. They're sending this out to security researchers and they've pledged $100 million, essentially to big companies like Microsoft to go and test all of the open source software, all Of the software in the world to find the vulnerabilities and fix it before they release this to the public because they said basically, this is going to be an existential crisis for code Because everything can be hacked and there's vulnerabilities everywhere that can be found so they're trying to like give it to the security researchers to fix everything before they Release it and it's not just for software this is just a general insanely good model but that's just something that they're concerned about so we're gonna get into all of that on the podcast Without too much doomerism i think there's a lot of optimism, but this is definitely an absolutely massive drop in model. And speaking of AI models, if you want to test all of the top AI models, everything from Anthropic to OpenAI to Grok to Gemini to 11 Labs for audio, tons of cool image models, go check out My startup AIbox.ai for $8.99 a month, you get access to over 80 of the top audio, image, text, video models, OpenAI's Soar, which is going to get discontinued because it costs $130 to Generate a video for them, but for you, it's very cheap. So if you want to check it out, go check out AIbox.ai. Hope that saves you a ton of money and you get access to everything in one spot. All right, let's talk about what's going on with Anthropic. So they just released this, what they're calling, of course, their quote, most powerful model yet. Now, it's interesting is usually everyone's like, this is our most capable model. This is most powerful. It sounds a little bit ominous. There was a leaked memo where they were actually calling it that. So this is what they told the world. This is just kind of internally. And basically, this right now is limited to, it's just kind of a debut for a bunch of the top organizations as part of a new security initiative, in which there's 40 partner organizations, And they're all deploying the model across a bunch of different quote unquote, defense security work areas. And they're basically trying to secure critical software before this goes out to the general public. I think they didn't specify exactly what this was trained on. So they're not saying like, hey, we specifically trained this on like cybersecurity work or kind of like source code. But right now, the preview that they're sending out to everyone is being used to scan both first party and open source software systems. They're looking for code vulnerabilities, and they're just giving this out to a lot of the big organizations. What they're saying right now is that over the last few weeks, they were using it internally, and they were able to identify quote, 1000s of zero day vulnerabilities, many of them critical. So they're saying a lot of the vulnerabilities are one to two decades old. So they have this new software, they ran on code bases, and they're finding vulnerabilities that have been around for 10 to 20 years in literally everything. And they're just they're concerned, they really can't release this to the public, because they're like, as soon as we release it to the public, security of basically all software is Going to explode. ([Time 0:00:15](https://share.snipd.com/snip/a06f80c0-d7ca-428f-9e4d-ccdc375921f4)) - **Mythos Is A New Frontier Tier For Agentic Coding** - Mythos is positioned as a general-purpose frontier tier with strong agentic coding and reasoning capabilities. - Jaeden says it outperforms prior tiers like Opus and Sonnet for complex tasks and agent building. Transcript: Jaeden Schafer It's a general purpose model. It's the new tier. So they have like Opus, Sonnet, they have these other tiers. This is going to be Mythos and is kind of the next highest tier. They have a a higher tier i guess they're not continuing with the opus model um or the you know sonnet model but kind of the opus being the best they actually are creating a new thing because It is such a big step up which is really interesting it has really strong agentic code need coding and reasoning skills so everyone using claude co-work which i've been shouting from The rooftops and claude code recently are going to love it. And it's basically the most sophisticated and high performance model. It can do complex tasks and it can do a lot of agent building and coding. ([Time 0:03:53](https://share.snipd.com/snip/ee50fb29-c489-4e14-9ee1-705148df4485)) - **Give Powerful Models To Defenders Before Public Release** - Anthropic is distributing Mythos to major companies and the Linux Foundation to scan and patch critical software before public release. - Recipients include Amazon, Apple, Microsoft, Cisco, CrowdStrike, Broadcom, and Palo Alto Networks. Transcript: Jaeden Schafer They're giving it to Amazon, Apple, Broadcom, Cisco, CrowdStrike, the Linux Foundation, Microsoft, and Palo Alto Networks. All of those people are going to share what they've learned from using the model so that the rest of the tech world can benefit from it. It's not going to be made publicly available, so we don't know exactly when they're going to actually launch it. It feels it's kind of like a wait and see. ([Time 0:04:44](https://share.snipd.com/snip/95ce6ce1-445c-400a-80fe-7ea72cd976e4)) - **Release Risk Drives Preemptive Patch Campaign** - Anthropic fears weaponization: releasing Mythos publicly could enable bad actors to find and exploit bugs at scale. - The company argues it's better to fix vulnerabilities now because others will eventually replicate similar models. Transcript: Jaeden Schafer When they released it, you know, if you kind of look at some of the current public models, we like, sure, you could use something like ChatGPT or Gemini or anything for some sort of cybersecurity Issue. But it feels like this, this one is so advanced. They're concerned about the threats of this being weaponized by bad actors, it's going to find bugs and exploit them. And because they found they just alone found so many zero day exploits and so much, you know, infrastructure and software, they're, you know, even with bad relationships with the government, They're giving this to the government, they're giving this to every major organization, and telling them look like use this and try to fix it for something like this gets out. And the other thing that I think is important is everyone's like, you know, well, why don't they just like not release it? If it's so dangerous, why don't they keep it forever? And the reality is these models are all getting better and better. And someone in China is going to make an open source version of this and release it either way. ([Time 0:07:21](https://share.snipd.com/snip/912efd01-c1ff-4a7a-aee8-ec0d26879e8f)) - **Act Now To Patch Before Capabilities Spread** - Use Anthropic's model to proactively fix global software vulnerabilities because similar capabilities will inevitably be recreated elsewhere. - Acting now reduces the chance that bad actors exploit those future open-source replications. Transcript: Jaeden Schafer And someone in China is going to make an open source version of this and release it either way. So I think it's in everyone's best interest to take this, use it to fix the software as fast as possible, because if Anthropic was able to create it, other people inevitably are going To be able to create it eventually as well. ([Time 0:08:07](https://share.snipd.com/snip/5026d9ae-d1d5-4606-9e6c-a201af783910)) - **Company Accidentally Exposed Thousands Of Source Files** - Anthropic accidentally exposed ~2,000 source files and over half a million lines of code during a Cloud Code launch snafu. - That incident caused about 1,000 GitHub repositories to be taken down while they issued takedowns and cleanups. Transcript: Jaeden Schafer Last month, Anthropic accidentally exposed about 2000 source code files and more than half a million lines of code that was kind of linked to a mistake in the launch of version 2.188 Of Cloud Code and their software package. The company accidentally caused a thousand code repositories and GitHub to be taken down because they were trying to clean up the mess and they were launching cease and desists. ([Time 0:08:21](https://share.snipd.com/snip/aa0cd89e-6615-45f7-b497-1cb56b52108b)) - **Anthropic's Revenue And Enterprise Adoption Exploded** - Anthropic's commercial growth is explosive, with run-rate revenue jumping from $9B to over $30B in months. - The company doubled customers spending >$1M ARR from 500 to over 1,000 in under two months. Transcript: Jaeden Schafer If you take a look at the numbers, just how fast Anthropic is growing right now, they put out a tweet a couple days ago where they said, our run rate revenue has surpassed $30 billion, up From $9 billion at the end of 2025. As demand for Claude continues to accelerate, this partnership gives us the compute to keep pace. So the revenue is exploding. They're making a lot of these partnerships. I mean, the end of 2025, they were at $9 billion in run rate and run rate revenue. And now they're past $30 billion, triple since the end of last year. I mean, we're three months in. So this is absolutely exploding. OpenAI is concerned. Everyone's concerned. Obviously, the software industry is concerned with what is, you know, coming down the pipe here. Something that's interesting is as far as that whole $9 million at the end of last year goes, they said, when we announced our Series G fundraise in February, we shared that over 500 business Customers were each spending over a million dollars on an annualized basis. Today, that number exceeds 1000 doubling in less than two months. ([Time 0:08:50](https://share.snipd.com/snip/ffe0d995-2db6-4c8e-97a3-938e6d928b76)) - **$100M Pledge To Fund Fixes Before Public Launch** - Anthropic is offering about $100M in credits to partners to incentivize them to find and fix vulnerabilities ahead of public release. - Jaeden frames this as the company paying major vendors like Microsoft to help secure global software stacks. Transcript: Jaeden Schafer They're like, we made a model so, you know, good, it discovered all of the cybersecurity issues. And now you need to use our model to fix the problem that we basically made. And so they're giving it out. But they are, in all fairness, they are pledging about $100 million. They're giving to all of these different companies and credits and tokens. And they're like, look, we're gonna give you guys $100 million to run through and fix all of the software in the world. ([Time 0:10:22](https://share.snipd.com/snip/07804f72-2dd5-4727-af27-94f07fe90dde))