Claude Mythos Found Zero-Days That Survived Decades of Human Review. What Stops It Next?

Anthropic launched Project Glasswing today — a consortium of 52 organizations including AWS, Apple, Google, JPMorganChase, and NVIDIA, deploying Claude Mythos Preview to autonomously find zero-day vulnerabilities in critical software. $100M in compute. The participants run chunks of the internet. The system card contains a sentence that should stop every security architect mid-scroll: "Claude Mythos Preview is the best-aligned model that we have released. It is also the model that likely poses the greatest alignment-related risk." Anthropicʼs own metaphor: a safer mountaineering guide takes clients on harder climbs. The safety improvements and the risk increase are both real — and theyʼre correlated, not competing. This is not a contradiction. Itʼs proof that the industry has been solving the wrong problem. What the System Card Actually Shows What Mythos can do: Autonomously discovered zero-days in OpenBSD, FFmpeg, and the Linux kernel — vulnerabilities that survived decades of human r