Anthropic's Mythos Sidesteps US Cybersecurity Oversight

The Cybersecurity and Infrastructure Security Agency (CISA), an entity frequently challenged during the Trump administration, has reportedly been denied access to Anthropic's advanced artificial intelligence capabilities.

While numerous U.S. federal agencies are reportedly integrating Anthropic's novel cybersecurity model to identify system vulnerabilities, the nation's primary cybersecurity coordinating body appears to be excluded. Axios reported on Tuesday that CISA does not possess access to Mythos Preview, a tool Anthropic champions for its robust ability to discover and remediate security flaws. Conversely, institutions such as the Commerce Department and the National Security Agency (NSA) are reportedly leveraging this model, with the Trump administration actively engaging in negotiations for wider access, as Axios detailed last week. In a public statement, Anthropic affirmed its "ongoing discussions with US government officials about Claude Mythos Preview and its offensive and defensive cyber capabilities," and an anonymous company official informed Axios that CISA was indeed among the agencies that received briefings. Anthropic refrained from comment, while CISA did not provide an immediate response to inquiries.

This reported lack of access, viewed alongside other initiatives to curtail CISA's personnel and financial resources, suggests a continued de-prioritization of the agency's critical functions by the current administration, potentially jeopardizing national digital security. CISA, operating under the Department of Homeland Security, is mandated to act as the central nexus for cybersecurity intelligence, supporting state and local authorities responsible for election integrity and public utilities in understanding vulnerabilities and reacting to cyber incidents. However, the Trump administration and congressional Republican allies have previously targeted the agency with political criticism, notably after its declaration that the 2020 election, which President Donald Trump lost to Joe Biden, was the "most secure in American history." Subsequently, President Trump dismissed the agency's director during his initial term.

Upon returning to office last year, the Trump administration has enacted a series of measures further constraining CISA's operational scope. In line with broader federal agency cutbacks by the Department of Government Efficiency, CISA experienced a loss of skilled personnel, with some staff also being redirected to focus on immigration-related initiatives within the DHS. The agency's acting director previously informed Congress about the constrained resources available for hack detection during the ongoing DHS shutdown, even as the Trump administration proposes further budget reductions amounting to hundreds of millions for CISA.

CISA's reported exclusion from Anthropic's Mythos Preview prompts critical inquiries into why an agency primarily responsible for safeguarding vital infrastructure against cyber threats cannot evaluate a tool that, according to Anthropic, has identified security vulnerabilities "in every major operating system and web browser." Newton Cheng, Anthropic's frontier red team cyber lead, explained to The Verge that restricted access is being granted to provide key institutions with a "head start" in developing cyber defenses. Nevertheless, it appears CISA will, for the foreseeable future, be denied this strategic advantage.