Skip to main content

Share story

Security

Discord Users Gained Unauthorized Access to Anthropic’s Restricted Mythos AI Model

Discord Users Gained Unauthorized Access to Anthropic’s Restricted Mythos AI Model Image: Primary
A group of amateur investigators on Discord obtained unauthorized access to Anthropic’s Mythos Preview, an AI model the company has tightly restricted because of its ability to find security vulnerabilities. The users gained entry through straightforward detective work rather than advanced hacking, according to Bloomberg. They examined data from a recent breach of Mercor, an AI training startup, and made an educated guess about the model’s online location based on the format Anthropic uses for other models. One person also leveraged existing permissions from work at an Anthropic contracting firm. The probing allegedly exposed not only Mythos but also other unreleased Anthropic models. Bloomberg reported that the group has so far used the access only to build simple websites, a choice intended to avoid detection by Anthropic. Mozilla said on Tuesday that it used legitimate early access to Mythos Preview to find and fix 271 vulnerabilities in its new Firefox 150 browser release. Anthropic has marketed Mythos as a dangerously capable tool for uncovering flaws in software and networks.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business. This story was sourced from Wired, Tom's Hardware and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
AI Security
AI Security

GitLab opens beta dashboard for auditing coding agents

GitLab introduced a beta AI Governance Dashboard for Premium and Ultimate customers that brings its own coding agents and connected external agents into one audit view. It links agent activity to developers and projects, showing s...

Security
Security

Hacker sentenced to eight years over tax-business phishing scheme

Chukwuemeka Victor Amachukwu was sentenced to eight years in prison for his role in spearphishing attacks against U.S. tax preparation businesses, authorities announced Monday. He pleaded guilty to conspiracy to commit computer in...

Policy AI
Policy AI

US orders civilian agencies to remove DeepSeek technology

The United States has ordered federal civilian agencies to stop buying DeepSeek products and services and remove them from government IT systems, according to the Department of Homeland Security. The restrictions also cover third-...

Security
Security

Go security releases block eight certificate authority keys

Go 1.27.3 and Go 1.26.10, released October 20, reject certificate chains passing through eight intermediate certificate authority keys, The Hacker News reports. The Go team recommends immediate upgrades, citing security concerns a...

Security
Security

Chrome adds warnings for suspicious sites and copied scam commands

Google announced new Chrome Enhanced Protection defenses that check suspicious websites and warn about copied commands used in ClickFix scams, 9to5Google reported. Those scams persuade users to run commands that install malware, b...