NSA director: 'Mythos "broke into almost all of our classified systems in hours"

Post by anakaine » Mon, Jun 22, 2026, 4:27 AM UTC

handoflixue wrote: post #52

MaxPock wrote: post #5

What happens when open source models achieve Mythos level capabilities in six months' time?

We'll see Mythos 2.0 patching all the Mythos 1.0 vulnerabilities before we see an open-source Mythos 1.0. What matters isn't the power of the tool, but whether defenders have had time to secure against. Today's cyberweapon is tomorrow's laughably obsolete. Stuxnet used to be a national security threat, now I'm not sure it would be useful for anything.

Post by onjectic » Mon, Jun 22, 2026, 4:47 AM UTC

mikewarot wrote: post #64

It's sad that they did the research[1] and solved computer security about 40 years ago[2], and then proceeded to lose that hard won knowledge over time. [1] https://csrc.nist.rip/publications/history/index_1.html [2] https://en.wikipedia.org/wiki/KeyKOS

Post by asdff » Mon, Jun 22, 2026, 4:56 AM UTC

Humorist2290 wrote: post #66

It must be a wild time in the corporate espionage world these days. The annual operating budget of the CIA is like 20B. That's a rounding error compared to the burn rates of these labs. Maybe it's conspiratorial, but it seems like the direction this is going is for the US to nationalize these companies. Somewhere between "too big to fail" and "national security."

Post by DaSHacka » Mon, Jun 22, 2026, 6:08 AM UTC

dualvariable wrote: post #50

mirekrusin wrote: post #43

Earlier quoted context omitted.

Yes, exactly, quite shocking, if something like this is true, as NSA (!!) director you keep it quiet, right?

That is literally just more security through obscurity. And the threat actors that would find that information "useful" already know it. All of our IT security is a mess, the NSA director is just confirming what should be common knowledge.

Post by snvzz » Mon, Jun 22, 2026, 6:26 AM UTC

mikewarot wrote: post #70

tra3 wrote: post #67

Earlier quoted context omitted.

I’m not familiar with this, but what does “solved” mean in this case? Guaranteed inability to compromise systems?

Pretty much. If you've got a microkernel / capabilities based OS, the amount of mischief that someone can cause is severely reduced. It's my belief that we can have general purpose, easy to use, secure computing for everyone. No UAC crap, or horrible systems like AppArmor, no virus scanners, etc... just computers that do what you want, and only what you want. We could have had it decades ago, if things had happened i…