Unauthorized group has gained access to Anthropic’s exclusive cyber tool Mythos, report claims

An unauthorized group gained access to Anthropic's Mythos cybersecurity tool through a third-party vendor contractor, compromising a security product designed for enterprise protection that could become a powerful hacking tool in malicious hands. This breach undermines Anthropic's carefully controlled limited release strategy (Project Glasswing) intended to prevent weaponization, exposing critical gaps in vendor access controls and third-party security management. IT leaders must reassess their supply chain security posture and AI tool governance, as this incident demonstrates that even purpose-built enterprise security solutions are vulnerable to insider threats and inadequate access controls.