LIVE · cybersecurity feed
Live wire
U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacksCISA Announces Enhanced Reporting Form for Cyber IncidentsCVE-2026-19868 · CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible ExploitationCVE-2026-119757 · BTCPay Server Insufficiently Protected Credentials Flaw Exploited Upon DisclosureCVE-2026-118066 · LatePoint Improper Authentication Vulnerability Exploited Upon DisclosureCVE-2026-120534 · ACF Extended Advanced Custom Fields PRO Flaw Exploited Upon DisclosureCVE-2026-109884 · Elementor Website Builder Flaw Exploited Same Day As DisclosureCVE-2026-19868 · SonicWall SonicOS SSLVPN Vulnerability Exploited On Day Of DisclosureCVE-2026-103898 · Wpmet wp_social_login_and_register_social_counter Flaw Exploited Upon DisclosureCVE-2026-116512 · weDevs wp_project_manager Flaw Exploited Before CVE Publication
vulnerability

Anthropic's super bug-finding Mythos model is going into Cisco and IBM products

Anthropic has announced a strategic expansion of its Mythos AI model, integrating the specialized bug-finding technology into enterprise security platforms managed by Cisco and IBM. This move marks a shift in how the company distributes its high-capability models, moving away from exclusive, vetted programs toward broader commercial availability within established security suites. Under these…

ZeroDay News ·

Source: The Register — Security

Photo: Prayitno (CC BY 2.0) via Wikimedia Commons

Anthropic has announced a strategic expansion of its Mythos AI model, integrating the specialized bug-finding technology into enterprise security platforms managed by Cisco and IBM. This move marks a shift in how the company distributes its high-capability models, moving away from exclusive, vetted programs toward broader commercial availability within established security suites. Under these new arrangements, end-users will gain access to the analytical capabilities of Mythos through third-party interfaces without ever interacting with or hosting the underlying model directly.

Cisco is incorporating Mythos into its AI Defense suite, a platform designed to identify vulnerabilities and inappropriate behaviors within AI models, agents, and their associated applications. By integrating Mythos, Cisco aims to enhance the red-teaming capabilities of its existing tools, allowing customers to stress-test their AI deployments more effectively. Cisco has confirmed that this functionality will be included in existing user licenses at no additional cost, positioning the integration as a performance upgrade to its current automated security testing features.

IBM is similarly adopting the technology, integrating Mythos into its Concert platform. This tool is primarily used to scan enterprise applications for security risks and structural weaknesses. IBM stated that the inclusion of Mythos is intended to identify complex vulnerabilities that traditional scanners often fail to detect. Furthermore, the integration is designed to assist developers by prioritizing which identified risks are most critical and providing automated suggestions for remediation, which developers can then review and approve.

The transition toward these partnerships follows the initial phase of Mythos’s release, known as Project Glasswing. That program restricted access to a small group of vetted organizations to prevent the model’s powerful exploit-generation capabilities from falling into the hands of malicious actors. Anthropic has maintained a cautious approach to distribution, acknowledging that the same features that allow Mythos to identify software flaws could theoretically be repurposed to facilitate cyberattacks if the model were improperly secured or leaked.

Alongside these enterprise integrations, Anthropic has released version 5.2 of both the Mythos and Fable models. The company reports that these updates offer a 30 percent increase in output speed compared to the 5.1 versions, alongside a revised pricing structure. Users now have the option to utilize a fast mode, which accelerates token generation by up to 2.5 times while doubling the cost per million tokens.

Anthropic claims that version 5.2 underwent rigorous pre-release safety evaluations, specifically targeting high-stakes risks such as sandbox escapes. The company asserts that the models remain well-aligned with safety standards and perform as well as, or better than, previous iterations. These evaluations were conducted in-house to ensure that the increased performance did not come at the expense of security or reliability.

A significant focus of the 5.2 release is the implementation of enhanced defenses against distillation attacks. Anthropic has previously expressed concern that foreign AI laboratories may attempt to clone its proprietary models by distilling their outputs. By strengthening these protections, the company aims to prevent unauthorized replication of its intellectual property while continuing to scale the availability of its tools to corporate partners.

While Anthropic has confirmed these partnerships with Cisco and IBM, it has not yet disclosed whether additional third-party integrations are planned. The company continues to manage access to the Mythos model through controlled channels, balancing the demand for high-performance security automation with the inherent risks associated with deploying advanced bug-finding AI.

vulnerability
ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerability

Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes

Anthropic has officially released Claude Mythos 5.2 and Claude Fable 5.2, the latest iterations of its AI models designed for specialized security and general-purpose tasks. While both models share the same underlying architecture, they differ significantly in their operational guardrails. Mythos 5.2 is an access-restricted model intended for vetted organizations participating in Anthropic’s…

CVE-2026-123218

IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for federal agencies to remediate two critical vulnerabilities currently being exploited in the wild. The agency added CVE-2026-123218, affecting IBM Aspera Faspex, and CVE-2026-116779, impacting SignalWire FreeSwitch, to its Known Exploited Vulnerabilities (KEV) catalog. Under the requirements of…

vulnerability

Google patches eighth Chrome zero-day exploited in attacks this year

Google has issued an emergency security update for its Chrome web browser to address a high-severity vulnerability that is currently being exploited in the wild. This flaw, tracked as CVE-2026-125350, marks the eighth zero-day vulnerability patched by the company since the beginning of 2026.

nation-state

IRISSCON 2026 puts preparedness for cyberattacks and hybrid threats in focus

Ireland faces a critical need to bolster its national security infrastructure to counter a rising tide of sophisticated cyberattacks and hybrid threats. Ahead of the IRISSCON 2026 conference held at Dublin’s Aviva Stadium, experts have characterized the current state of national readiness as potentially inadequate. The discourse centers on the necessity of moving beyond isolated defensive…

security

Default Admin Password Let Researchers Unlock and Start Cars

Security researchers Shubham Shah and Sam Curry have disclosed a series of vulnerabilities that allowed them to remotely unlock and start vehicles by compromising the identity management infrastructure of two unnamed automotive brands. The researchers detailed their findings in separate reports published in early November 2026, noting that the flaws affected customer accounts across the United…

breach

Binance Investigates ShinyHunters Breach Claims

Binance is currently investigating claims made by the threat actor group ShinyHunters, which alleges it has successfully breached the cryptocurrency exchange’s systems. On November 4, 2026, the group posted an advertisement on the PwsForums platform, asserting that it had obtained approximately 335.9 million records. The attackers are demanding a payment of $900,000, threatening to leak the…