We reproduced Anthropic's Mythos findings with public models

blog.vidocsecurity.com
April 17, 2026
16 min read
51/100
Summary
Anthropic's Mythos and Project Glasswing suggest that advanced AI vulnerability research should be restricted, but replication studies show that similar capabilities are already present in public models. Frontier models are increasingly effective at identifying serious vulnerabilities in real software.
Key Takeaways
- Public AI models, such as GPT-5.4 and Claude Opus 4.6, can reproduce significant findings from Anthropic's Mythos, indicating that advanced AI vulnerability research is not limited to proprietary models.
- The replication results showed that while public models successfully replicated vulnerabilities in FreeBSD and Botan, they had mixed results with FFmpeg and wolfSSL.
- The methodology used in the vulnerability research involves a systematic process of inspection, validation, and prioritization, rather than a single prompt or output.
- The shift in AI-assisted vulnerability research suggests that the focus is moving from model access to the challenges of validating and operationalizing findings in real-world applications.
Coverage & discussions
Hacker News · blog.vidocsecurity.com
Community discussions
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Community Sentiment
Positives
- The discussion highlights the importance of reproducibility in AI research, emphasizing that clear experimental setups are crucial for validating model claims.
- The ability of Mythos to identify vulnerabilities without overly specific prompts suggests a significant advancement in AI's application to security tasks.
Concerns
- Critics argue that the reproduction attempts lack transparency regarding the exact prompts used by Anthropic, raising concerns about the validity of the findings.
- There is skepticism about the claims made by Mythos, with some suggesting that the real advancements may stem from the harness rather than the model itself.
Related Articles

Assessing Claude Mythos Preview's cybersecurity capabilities
Apr 7, 2026

Post-Mythos Cybersecurity: Keep calm and carry on
Jun 27, 2026

A Boy That Cried Mythos: Verification Is Collapsing Trust in Anthropic
Apr 23, 2026

Discovering Cryptographic Weaknesses with Claude
Jul 28, 2026

OpenAI’s accidental attack against Hugging Face is science fiction that happened
Jul 23, 2026