Loading story…
Anthropic announced the Anthropic Cyber Mission, a program combining Claude models, its engineers and threat research with outside cybersecurity expertise to identify and fix vulnerabilities in critical infrastructure and open-source software. The company said it has offered frontier models and technical support to more than half of U.S. states and large critical infrastructure operators, supporting code scanning, patching, incident response and red teaming.
The initiative also includes a free, opt-in scanning service for open-source projects, providing periodic vulnerability reports with proofs of concept, explanations and suggested patches. Anthropic cautioned that reports may contain inaccuracies, making validation important before acting on findings or applying fixes. Its longer-term goals include automating most vulnerability triage and patching and developing new security architectures and coding standards.
See the actors and campaigns active against you right now.
5 events from the most recent confirmed update back to the earliest known activity.
Anthropic launched its Cyber Mission on October 8, 2026, combining Claude models, engineering support, threat research and funding for cybersecurity defenders. Its Defender Advantage Fund supports pilot projects and keeps OSS Scanner free.
After organizations requested all model-generated findings, including unreviewed results, Anthropic created a free service offering periodic scans with proofs of concept, explanations and suggested patches. The company warned that the faster-delivered reports could contain inaccuracies.
Anthropic announced a program combining Claude models, its engineers and threat research with outside cybersecurity expertise to identify and fix vulnerabilities in critical infrastructure and open-source software. Named participants include CrowdStrike, Dragos, Nozomi Networks, Palo Alto Networks and Rockwell Automation.
Anthropic expanded its Cyber Verification Program to all critical infrastructure operators, offering access to AI models with reduced guardrails for defensive and offensive cybersecurity work. The expansion preceded the Critical Infrastructure Defense Program.
Anthropic offered frontier models and technical support to more than half of U.S. states and large critical infrastructure operators. The support covers code scanning, patching, incident response and red teaming.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
5 references tracked. Mallory keeps watching after this page renders.
securityweek.com
Open sourcecybersecuritynews.com
Open sourcebankinfosecurity.com
Open sourcecyberscoop.com
Open sourceanthropic.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Anthropic introduced real-time cyber safeguards for its Claude Opus and Sonnet models that automatically block prompts tied to prohibited or high-risk cyber activity, including mass data exfiltration and ransomware development. The company said some dual-use requests, such as vulnerability exploitation or offensive security tooling, may still be permitted through its application-based Cyber Verification Program, which is intended for vetted defensive security professionals and is not currently available for Zero Data Retention users or through Amazon Bedrock and Google Vertex AI. Anthropic also launched a HackerOne program to reward researchers who find high-impact jailbreaks that let Claude Fable 5 generate exploit code, malware, or detailed attack guidance it would normally refuse. The moves come amid broader industry concern that advanced models can sharply reduce the time and skill needed for offensive cyber work, while related reporting tied Anthropic’s vulnerability-discovery efforts to IBM and Red Hat’s new **Project Lightwell**, a $5 billion service aimed at backporting and delivering signed fixes for open-source flaws uncovered faster than enterprises can patch them.
Jul 3, 2026
Anthropic launched **OSS Scanner**, a free, opt-in service that uses its strongest AI models to repeatedly audit eligible open-source projects and email potential vulnerabilities directly to maintainers. Eligibility prioritizes established, widely used projects important to infrastructure and user security, particularly those exposed to remote attacks. Enrollment requires verified core-maintainer status, project configuration, and build instructions. The service builds projects in isolated virtual machines with network access, then disables Internet access before auditing. Reports include reproduction steps and proposed patches where available, but receive **no human review before delivery**. In an assessment of 97 high- and critical-severity findings across 48 projects, penetration testers determined that 85 met Anthropic’s coordinated disclosure criteria, 11 were genuine but duplicative, and one was invalid. Maintainers remain responsible for validating findings and proposed fixes and prioritizing remediation; Anthropic warns that reports may overstate severity or misunderstand security assumptions. Projects can supply testing guidance, pause automated reports, or opt out. Unvalidated findings carry no mandatory 90-day disclosure deadline, although findings subsequently confirmed through Anthropic’s human-reviewed program may enter its disclosure process.
Oct 9, 2026
Anthropic unveiled **Claude Mythos Preview**, an unreleased AI model it says can autonomously discover and exploit severe software vulnerabilities across major operating systems, browsers, open-source projects, and some closed-source targets. The company said the model uncovered thousands of high-severity flaws, including long-lived bugs in **OpenBSD**, **FFmpeg**, Linux kernel privilege-escalation chains, and **`CVE-2026-4747`**, a FreeBSD NFS remote code execution flaw that could enable unauthenticated root access. Anthropic withheld broad release, citing offensive cyber risk, and instead launched **Project Glasswing**, a gated program for roughly 40 to 50 partners such as AWS, Apple, Cisco, Cloudflare, Google, JPMorgan Chase, Microsoft, Mozilla, NVIDIA, and Palo Alto Networks to validate findings, patch affected software, and study defensive uses. Independent and industry assessments broadly agreed Mythos marks a significant advance in AI-enabled cyber capability, though several researchers questioned how much of Anthropic’s headline claims can yet be verified through public CVEs and warned that similar results may be reproducible with cheaper or open models plus strong tooling. The UK AI Security Institute found Mythos achieved a **73%** success rate on expert capture-the-flag tasks and completed a full 32-step simulated enterprise attack in 3 of 10 runs, while Anthropic later reported coordinated disclosure activity spanning **1,596 vulnerabilities across 281 open-source projects** and partners identifying more than **10,000** high- or critical-severity candidates. Governments, financial regulators, and CISO groups in the US, UK, Europe, Canada, and Japan responded with briefings and warnings that AI is compressing the gap between vulnerability discovery and weaponization, leaving remediation, patch governance, and defensive automation as the main bottlenecks.
Aug 31, 2026