Sometimes it’s not the planned announcements that make the biggest waves. Last week, a simple configuration error in Anthropic’s content management system made roughly 3,000 unpublished files publicly accessible. Among them: a draft blog post about a model called Claude Mythos.
What We Know About Mythos
Anthropic calls Mythos a “step change” in AI performance — the most capable model the company has built to date. The leaked documents describe a new model tier called Capybara, sitting above Opus. Bigger, more expensive, significantly more capable.
The internal benchmarks are striking: compared to Claude Opus 4.6, Capybara achieves “dramatically higher scores on tests of software coding, academic reasoning, and cybersecurity.” The model is currently in an early access program with select customers.
The Problem: Cybersecurity Risks
This is where things get serious. Anthropic’s own internal documents warn that Mythos poses significant cybersecurity risks. The model is “currently far ahead of any other AI model in cyber capabilities” and could “presage an upcoming wave of models that can exploit vulnerabilities in ways that far outpace the efforts of defenders.”
That’s remarkable because it’s coming from Anthropic itself — a company that has made safety and responsibility its core identity. The market reaction was swift: cybersecurity stocks took a hit after the leak became public.
How Anthropic Is Responding
Anthropic is deliberately restricting early access to organizations focused on cyber defense. The idea: give defenders a head start before the model becomes widely available. The model is described as “expensive to run and not yet ready for general release.”
My Take
Two things stand out. First, the fact that this model was revealed through a security error is deeply ironic for a company that’s positioning itself as the safety-first AI lab. Second, when Anthropic itself says their own model carries unprecedented cybersecurity risks, we should take that seriously. The strategy of giving defenders a head start is smart — but whether it’ll be enough remains to be seen.
Sources: