{"id":167994,"date":"2026-04-08T17:12:47","date_gmt":"2026-04-08T15:12:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/anthropic-anonsiroval-ai-model-claude-mythos-umeyushhuyu-sozdavat-rabochie-eksploity"},"modified":"2026-04-08T17:12:47","modified_gmt":"2026-04-08T15:12:48","slug":"anthropic-anonsiroval-ai-model-claude-mythos-umeyushhuyu-sozdavat-rabochie-eksploity","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/anthropic-anonsiroval-ai-model-claude-mythos-umeyushhuyu-sozdavat-rabochie-eksploity","title":{"rendered":"Anthropic has announced the AI model Claude Mythos, capable of creating working exploits.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Anthropic has unveiled the Glasswing project, which will provide access to a preview version of the AI model Claude Mythos aimed at identifying vulnerabilities and enhancing the security of critical software. Participants in the project include the Linux Foundation and companies such as Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorgan Chase, Microsoft, NVIDIA, and Palo Alto Networks. About 40 other organizations have also been invited to join the project. <\/p>\n
Released in February, the AI model Claude Opus 4.6 has reached a new qualitative level in areas such as vulnerability detection, bug hunting, change review, and code generation. Experiments with this AI model have uncovered over 500 vulnerabilities in open projects and generated a C compiler capable of building the Linux kernel. However, the Claude Opus 4.6 model struggled significantly with creating working exploits. <\/p>\n
The next-generation model 'Claude Mythos' claims to significantly outpace Claude Opus 4.6 in the field of ready exploit creation, according to Anthropic. Of several hundred attempts to create exploits for vulnerabilities identified in the JavaScript engine of Firefox 147, only two attempts were successful with Claude Opus 4.6. When repeating the experiment using a pre-release version of the Mythos model, operational exploits were successfully created 181 times \u2014 the rate of successful exploit generation increased from near-zero levels to 72.4%.
<\/center> <\/p>\n
Moreover, Claude Mythos has significantly expanded capabilities for error and vulnerability detection, which, combined with its suitability for exploit development, creates new risks for the industry \u2014 exploits for unpatched vulnerabilities (0-day) can be created by amateurs in a matter of hours. It is noted that the Mythos model's abilities in detecting and exploiting vulnerabilities have reached professional quality, only falling short of the most experienced specialists. <\/p>\n
Since granting unlimited access to an AI model with such capabilities requires industry preparation, it has been decided to initially open access to a preliminary version to a select group of experts to conduct work on identifying and addressing vulnerabilities in critically important software products and open-source software. A subsidy of $100 million has been allocated to fund this initiative, and it has also been decided to distribute $4 million as donations to organizations involved in maintaining the security of open projects. <\/p>\n
In the CyberGym test set, which evaluates the ability of models to identify vulnerabilities, the Mythos model achieved a score of 83.1%, while Opus 4.6 scored 66.6%. In quality coding tests, the models demonstrated the following results:
During the experiment, Anthropic was able to identify several thousand previously unknown (0-day) vulnerabilities using the Mythos AI model over a few weeks, many of which were marked as critical. Among them, a vulnerability in the OpenBSD TCP stack that had gone unnoticed for 27 years was found, allowing remote initiation of a system crash. A 16-year-old vulnerability in the H.264 codec implementation from the FFmpeg project was also discovered, along with vulnerabilities in the H.265 and AV1 codecs, exploited during the processing of specially crafted content. <\/p>\n
Several vulnerabilities have been identified in the Linux kernel that allow a non-privileged user to gain root privileges. Chaining these identified vulnerabilities together has enabled the creation of exploits that allow for the achievement of root privileges when opening specific pages in a web browser. An exploit was also created that allowed code execution with root privileges by sending specially crafted network packets to an NFS server from FreeBSD. <\/p>\n
A vulnerability has been identified in one of the virtualization systems, written in a language that provides means for safe memory operations, which can potentially allow code execution on the host side through manipulations in the guest system (the name is not disclosed as the issue has not yet been fixed, but it seems the vulnerability exists in the unsafe block of Rust code). Vulnerabilities have been found in all popular web browsers and cryptographic libraries. Vulnerabilities leading to SQL code injection have been identified in various web applications. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Anthropic](\"\/wp-content\/uploads\/2026\/04\/d0c9f64cb53fde8697690948e3a68c94.png\")
<\/center> <\/p>\n