Anthropic's Mythos and Project Glasswing suggest that advanced AI vulnerability research should be restricted, but replication studies show that similar capabilities are already present in public models. Frontier models are increasingly effective at identifying serious vulnerabilities in real software.