【AI+Anthropic】U.S. CISA Reportedly Using Mythos to Review Government Code Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is reportedly using Anthropic's AI model Mythos to audit government software, indicating that despite ongoing disagreements between Anthropic and the White House, the government remains keen on adopting Anthropic's tools.

Reuters, citing sources, said that CISA is using Mythos to scan government code repositories for vulnerabilities that could open the door to foreign spies and cybercriminals. Sources said the scanning is carried out by CISA's Attack Surface Assessment Team. This team is a division of CISA responsible for conducting digital security assessments and hacker drills across the government.

It is reported that the auditing work has discovered a large number of vulnerabilities, but it is unclear how much government code the team has reviewed, nor the nature or severity of the vulnerabilities.

This year, Anthropic refused to allow the U.S. military to use its AI models for domestic surveillance and fully autonomous weapon systems, leading to a breakdown in relations with the government. The government subsequently placed Anthropic on a supply chain blacklist.

According to Axios, although Mythos has been blacklisted, the National Security Agency (NSA) started using it as early as April. A report last month said that NSA analysts tested Mythos in a classified environment and were impressed by its capabilities.

However, after Anthropic launched a public version of Mythos called Fable, the White House suddenly demanded that the company ban foreigners from executing the model, leading to a global suspension of the model until last week when the ban was lifted.