We Already Had the Warning
The recent PHP vulnerabilities brought back the warning we already had when Claude Mythos was introduced. My view is simple: take the preventive route. Review the systems we depend on, harden what we deploy, and prepare to apply fixes promptly. Waiting to see whether an attack reaches us is an approach I would rather avoid. The warning before PHP When Anthropic introduced Claude Mythos Preview in April 2026, it reported that the model could find serious software vulnerabilities and develop working exploits. Its researchers described cases where engineers requested a vulnerability search overnight and had a working exploit by morning. Initial access was restricted through Project Glasswing so selected organizations could use it for defensive work. These were Anthropic’s reported results, with the limitations of a vendor’s own evaluation. Anthropic’s Mythos research. ...