US summons bank bosses over cyber risks from Anthropic's latest AI model

Post by pixel_popping » Fri, Apr 10, 2026, 6:11 PM UTC

giantg2 wrote: post #56

pixel_popping wrote: post #8

Earlier quoted context omitted.

Cybersecurity is taken too lightly and it mostly boils down to recklessness of developers, they are just "praying" that no-one act on the issues they already know and it's something we must start talking about. Common recklessness obviously include devs running binaries on their work machine, not using basic isolation (why?), sticky IP addresses that straight-up identify them, even worse, using same browsers to acces…

"Cybersecurity is taken too lightly and it mostly boils down to recklessness of developers, they are just "praying" that no-one act on the issues they already know and it's something we must start talking about." I agree that cyber security is taken too lightly. However, I think that many developers don't actually know about vulnerabilities. In many companies those reports get filter through other teams and prioritiz…

Post by MrDarcy » Fri, Apr 10, 2026, 6:13 PM UTC

pixel_popping wrote: post #8

causal wrote: post #6

Maybe it's marketing, but I think it's regrettable that Anthropic paired project Glasswing with Mythos. It really makes it seem like Mythos is the threat, rather than the fact that tons of vulnerabilities have always been ignored throughout the software world. If Glasswing has been started years ago with the goal of applying fixes to AI-found gaps, then this would just be another model to add to that effort. But doin…

Cybersecurity is taken too lightly and it mostly boils down to recklessness of developers, they are just "praying" that no-one act on the issues they already know and it's something we must start talking about. Common recklessness obviously include devs running binaries on their work machine, not using basic isolation (why?), sticky IP addresses that straight-up identify them, even worse, using same browsers to acces…

Post by alephnerd » Fri, Apr 10, 2026, 6:16 PM UTC

cestith wrote: post #67

alephnerd wrote: post #44

Earlier quoted context omitted.

> ignites a new digital "cold war" Already been going on for over a decade - export controls on dual use technology like Xeon processors already began being enforced back in the Obama admin. > until the launch takes place It's already launched. Some companies had access to Mythos for months. > fuelling the hype This is true. Commercially available models from a year ago are already good enough from an offensive secur…

I was in the industry when key lengths for SSL were different between US domestic and US products for export. That’s one reason so much Open Source cryptography software expertise built up in Europe so quickly.

Post by cestith » Fri, Apr 10, 2026, 6:20 PM UTC

SpicyLemonZest wrote: post #33

colechristensen wrote: post #27

Earlier quoted context omitted.

Two things can be true. Historically bad security that people just got by with matched with powerful tools that aren't any better than the best people, but now can be deployed by mediocre people.

Which is exactly what Anthropic understands the situation to be. They state at the beginning of the Glasswing blogpost that Mythos is not better than the best vulnerability researchers. But it doesn't have to be to become a tremendously big deal.

Post by marcuskane2 » Fri, Apr 10, 2026, 6:31 PM UTC

petcat wrote: post #38

sroussey wrote: post #3

Promoting the model as potentially dangerous might backfire with the government banning it from being released by executive order.

> the government banning it from being released by executive order. There's no legal mechanism for the president or the government at all to do that.