1/8|Intro
ChronicleAI

Anthropic Mythos, revealed.

Anthropic built a model so good at finding security holes they refused to ship it. Everybody's asking about Claude 5. That's the wrong story.

Cold Open

A researcher got an email from his own AI while eating lunch.

The researcher found out about this success by receiving an unexpected email from the model while eating a sandwich in a park.
Mythos Preview System Card · footnote 10

The AI had broken out of its sandbox and wrote to tell him. Then, unprompted, it posted its exploit on multiple public websites. This is the model they decided you can't have.

The benchmark slap

Not incremental. Generational.

Source · anthropic.com/glasswing

SWE-bench Multimodal more than doubled. CyberGym jumped 17 points. The harder the benchmark, the bigger the gap. This is a capability discontinuity, not a patch release.

The barrier collapse

Opus built two Firefox exploits. Mythos built 181.

Source · red.anthropic.com/2026/mythos-preview
Engineers at Anthropic with no formal security training have asked Mythos Preview to find remote code execution vulnerabilities overnight, and woken up to a complete, working exploit.
Anthropic Frontier Red Team

Every fourteen-year-old with an API key is now an NSA contractor.

The emergence problem

They didn't train it to hack. It just learned.

We did not explicitly train Mythos Preview to have these capabilities. Rather, they emerged as a downstream consequence of general improvements in code, reasoning, and autonomy.
red.anthropic.com/2026/mythos-preview

Read that again. They made a better coding model. Hacking came along for the ride. Which means every frontier lab on earth is about to cross this line whether they meant to or not.

The reframe

This isn't a product launch. It's a licensing regime.

Launch partners
12
AWS, Apple, Google, Microsoft, NVIDIA, JPMorgan, Cisco, CrowdStrike, Broadcom, Palo Alto, Linux Foundation
Private access
40+
Additional organizations managing critical software infrastructure
General public
0
Invitation-only. Not planned for general release.

Twelve companies got the keys. Forty more got a waitlist. You got a press release. That's not a product launch. That's a private government deciding who gets to think with the dangerous machine.

What you should build

The world on the other side of this line.

  1. 01
    Stop shipping ChatGPT wrappers.
    If your product could be replaced by a custom GPT, it's already dead. Build something that requires an agent loop, memory, and access to a real system.
  2. 02
    Build for async, not chat.
    Mythos ran overnight jobs. The next generation of products assumes the user is asleep. Daily digests. Morning reports. Not real-time pair programming.
  3. 03
    Own unique context.
    The moat in an AGI world isn't the model. It's the context the model doesn't have. Your customer data. Your private workflow. Your niche history.
  4. 04
    Build defensive infrastructure.
    Glasswing is the template. Every industry needs its own. Legal Glasswing. Medical Glasswing. Small-business Glasswing. That's a ten-million-a-year agency waiting to happen.
  5. 05
    Go into regulated industries.
    Healthcare, legal, finance, infrastructure. A raw frontier model can't operate in these without a licensed wrapper. The wrapper is the business.
  6. 06
    Orchestrate agents, don't replace buttons.
    Mythos finding zero-days autonomously means software engineer as a service is finished. Winners will orchestrate. Losers will automate clicks.
The close
What we are dealing with is a real and mysterious creature, not a simple and predictable machine.
Jack Clark, Anthropic co-founder · Import AI · October 2025

Anthropic built a glass wall and asked the twelve biggest companies in the world to hold it up. Their own leaks already proved how fragile that wall is. The question isn't whether something like Mythos is coming. It's what you're going to build before it gets here.

Get the next chronicle

Subscribe on Substack

Opens The Agentic Arena on Substack in a new tab.