Mythos Finds a Curl Vulnerability
Key takeaways
- Back in April 2026 Anthropic caused a lot of media noise when they concluded that their new AI model Mythos is dangerously good at finding security flaws in source code.
- The whole world seemed to lose its marbles.
- Part of the deal with project Glasswing was that Anthropic also offered access to their latest AI model to Open Source projects via Linux Foundation.
Back in April 2026 Anthropic caused a lot of media noise when they concluded that their new AI model Mythos is dangerously good at finding security flaws in source code. Apparently Mythos was so good at this that Anthropic would not release this model to the public yet but instead trickle it out to a selected few companies for a while to allow a few good ones(?) to get a head start and fix the most pressing problems first, before the general populace would get their hands on it.
The whole world seemed to lose its marbles. Is this the end of the world as we know it? An amazingly successful marketing stunt for sure.
Part of the deal with project Glasswing was that Anthropic also offered access to their latest AI model to Open Source projects via Linux Foundation. Linux Foundation let their project Alpha Omega handle this part, and I was contacted by their representatives. As lead developer of curl I was offered access to the magic model and I graciously accepted the offer. Sure, I d like to see what it can find in curl.