Claude Mythos

“recognizing that bugcount alone wasn't super-relevant but also remember being impressed by an NFS bug and a kernel bug”

“80% of the security vulnerabilities that Mythos initially flagged in the Linux kernel turned out to be false positives”

“Just a few months ago almost no one here believed Mythos could actually be as good at hacking as the company claimed.”

“If Mythos is what it takes to get you (your boss?) to take these issues serious, then the hype is worth it.”

“Mythos is extreme hype. We are at a combo of authoritarian politicians peddling fear for power and tech bros trying to extract maximum investment returns.”

“Anthropic has been touting how their newest model is basically a cyber weapon and is so dangerous that they need to only role it out to trusted people”

“These models are definitely a lot better than your run of the mill human developer at finding security flaws in existing systems.”

“I think it's likely the Mythos self-restriction was a responsible action initially suggested by their AI safety team in good faith.”

“Ever since the Mythos announcement it's been clear that we're heading towards a future where SOTA models are no longer available to the average person”

“What did you expect exactly from a "10 pages epic rhyming poem about a haircut where every word starts with the letter S"?”

“For something like Mythos in 2026, where now the social implications of better LLMs are more understood, it's more fair to call it a marketing gimmick.”

“I see no evidence that this setup [Mythos] finds issues to any particular higher or more advanced degree than the other tools have done before Mythos.”

“if you do that, you get something capable of end to end chaining and reasoning about a much broader class of vulnerabilities”

“I would expect Mythos to be able to find vulnerabilities without pointing it out for him, otherwise it's no better from other agents.”

“can greatly streamline bug hunting and exploit developments in the hands of a competent security engineer”

“Weird take to claim "generally intelligent frontier" (whatever rhat means) and restrict availability based on "offensive" cyber security alone”

“it is not perfect, very much similar to what pentesters would do with the added bloat of noise in reports about nonissues”

“My personal conclusion can however not end up with anything else than that the big hype around this model so far was primarily marketing.”

“Anthropic's BS marketing is something to behold and viewing it with extreme skepticism is smart.”

“The fact that Mythos found only one vulnerability is testament to how solid curl is, not how bad Mythos is.”

“Mythos looks like a good incremental model but the PR team has done a great job of associating themselves with the current trend”

“Using a very expensive model like Mythos for some little used non-critical software is overkill, but for Curl, it absolutely isn't.”

“Mythos simply hasn't lived up to the "we're all gunna die from the flood of vulnerabilities" hype even slightly”

“It could be another marketing stunt like Mythos, which is so dangerous to release that Antrhopic must be bailed out by the government.”

“its hit rate on finding potential bugs and filtering out the real ones from the hallucinations is good enough to matter”

“the most dangerous model (Mythos) which can find CVE in other projects wasn't able to find this CVE within the claude-code project itself”

“The Mythos reports have several examples of chaining a whole bunch of logic in different parts of the program together to exploit something very subtle.”

“Mythos did seem to be fairly clever about putting together things from different domains to find problems.”

“Mythos is good for cybersecurity simply because now executives can't just tell people that only superhackers can break their stuff”

“Mythos Preview is every bit as capable. So far we've found no category or complexity of vulnerability that humans can find that this model can't.”

“They way they've published hashes of the bugs it has found so that once those bugs are fixed they can responsibly disclose them”

“40 different companies that have all committed resources to patching their systems based on vulnerabilities found by Mythos”

“There is little doubt that Mythos is a more powerful model, but there is no quantum leap towards Mythos”

“That they were able to use it for security scanning puts the false positive rate at a useable level, inherently.”

“The most "moral" of all moral companies, Anthropic, may not be able to stop building capabilities that look very much like weapons.”

“The trick with Mythos wasn't that it didn't hallucinate nonsense vulnerabilities, it absolutely did.”

“if their model can reliably write an exploit for novel bugs (starting from a crash, not a vulnerable line of code) then it's very significant”

“With no independent reviews on the research and with many security researchers and experts accusing them of blatant scaremongering.”

“Mythos is unavailable for non-privileged users and even when it will be available for more people it will be much more expensive than the alternatives.”

“The interesting thing about Mythos is its ability to find security vulns in software that has an uncompromised supply chain.”