Title: Anthropic Investigates Security Claim Over Unauthorized Access to Claude Mythos Model - News Directory 3

Anthropic stated that it has found no evidence that the unauthorized access has impacted its systems or extended beyond the third-party vendor's environment.

Anthropic is investigating a claim that a small group of people gained unauthorized access to its Claude Mythos model, a cybersecurity tool designed to identify and exploit vulnerabilities in major operating systems and web browsers.

The company confirmed It's looking into reports that unauthorized users accessed the Mythos preview through a third-party vendor environment, according to a statement provided to Bloomberg and reported by multiple outlets including The Guardian and The Verge.

Anthropic stated that it has found no evidence that the unauthorized access has impacted its systems or extended beyond the third-party vendor's environment.

The Mythos model, part of Anthropic's Project Glasswing initiative, has been made available to a select group of companies including Apple, Nvidia, Google, Amazon Web Services, and Microsoft for testing purposes.

The company has warned that Mythos could pose significant cybersecurity risks if misused, describing it as capable of enabling cyber-attacks when directed by a user to exploit vulnerabilities.

According to Bloomberg, the group that accessed the model consists of a "handful" of individuals who gained access on the same day Mythos was announced as being released to initial vendor partners.

The group reportedly used a combination of a contractor's access and commonly used internet sleuthing tools to locate and access the model, with one member identified as a worker at a third-party contractor for Anthropic.

Members of the group are part of a Discord channel focused on uncovering information about unreleased AI models and have been using Mythos regularly since gaining access, providing screenshots and a live demonstration to Bloomberg as evidence.

The group told Bloomberg they are interested in "playing around" with the technology rather than causing harm, and have not run cybersecurity prompts designed to exploit vulnerabilities.

Anthropic continues to investigate the incident and has not released further details about the third-party vendor involved or the specific methods used to gain access.