The White House Office of Management and Budget is currently drafting strict security protocols to allow major federal agencies to begin using the new “Claude Mythos” artificial intelligence model developed by Anthropic. This advanced model has raised concerns among cybersecurity experts and financial regulators on both sides of the Atlantic since its limited release earlier this month. According to an internal memo, Federal Chief Information Officer Gregory Barbaccia informed government departments of the plan, paving the way for the adoption of unprecedented technologies in government work and electronic protection.
This bold move comes as government officials grapple with the model’s immense capabilities, which could significantly increase cybersecurity risks. This government approach is unfolding despite ongoing legal and political clashes between the Trump administration and Anthropic regarding the use of the company’s AI technology. These developments highlight the strategic importance that AI models have come to play in shaping the future of national security for the United States and the world.
A dangerous AI model that cannot be released to the public
Anthropic announced its advanced model on April 7, restricting access to it and limiting its use to about 40 partner organizations under an initiative called “Project Glasswing.” The company revealed striking details during the internal testing phase, where engineers with no formal cybersecurity training directed the model to search for software vulnerabilities overnight. In the morning, they discovered that the model had not only found those vulnerabilities but also provided them with a complete and practical method to exploit them successfully, according to an analysis by Sullivan & Cromwell.
Anthropic explained that the “Claude Mythos” model has successfully identified thousands of serious, previously unknown security vulnerabilities across major operating systems and web browsers. What is concerning is that less than 1 percent of these vulnerabilities have been patched or fixed by the developing companies. Based on these serious findings, the company stated that it has no plans to ever make this model available to the general public anytime soon.
Meanwhile, Jack Clark, co-founder of the company, confirmed during the Semafor World Economy Summit that Anthropic had briefed the Trump administration on the new model’s capabilities despite ongoing tensions between the two parties. Clark said in his remarks: “The government must be fully aware of these sensitive technical developments,” emphasizing the need for cooperation to address advanced technological challenges.
High alert status in Washington and Wall Street
In a related context, U.S. Treasury Secretary Scott Bessent and Federal Reserve Chair Jerome Powell held an urgent meeting with chief executives of major U.S. banks on April 7 in Washington, D.C. The meeting aimed to warn banking leadership about the serious implications of the new model. Since then, giant banks such as JPMorgan Chase, Goldman Sachs, Citigroup, and Bank of America have begun conducting intensive internal testing of the model to assess its potential impact on their sensitive systems.
On a parallel governmental front, Sam Corkus, chief information officer at the Treasury Department, has begun seeking direct access to the new technology to enable the department’s tech team to search for potential security vulnerabilities in its own systems and secure them proactively. Reports indicated that at least two other federal agencies and three congressional committees have contacted the company to test the model and explore its defensive and offensive capabilities.
European regulators join the response efforts
Concerns were not limited to the United States alone, but extended to the European continent and its decision-makers. The European Central Bank has begun arranging an emergency call with senior risk officers at euro zone lending banks to assess cyber threats. The ECB is currently gathering precise information on the model’s ability to exploit weaknesses in financial systems, as supervisors seek to understand its serious implications for legacy banking technology still widely used in Europe.
Reports indicated that ECB supervisors believe this advanced model poses unprecedented challenges to the entire banking industry—the same challenges that have sparked widespread concern among regulators in Britain and the United States. Financial authorities fear that hacking legacy banking systems could lead to a complete paralysis of interconnected global financial operations.
A double-edged sword in the world of cybersecurity
This rapid, cross-border regulatory response highlights a central tension surrounding advanced AI technologies. The superior capabilities that make the “Claude Mythos” model a powerful and effective defensive tool for discovering and fixing software flaws are the very things that make it a lethal and destructive weapon if it falls into the wrong hands. The AI’s ability to automate vulnerability discovery and instantly generate exploit code changes the rules of engagement in cyber warfare, forcing governments and financial institutions to fundamentally rethink their security strategies.
The emergence of this model raises profound questions about the future of AI regulation at the international level. While nations strive to enhance their technological capabilities to stay ahead in the global race, an urgent need arises to draft international treaties that define frameworks for using these super-intelligent models. The real challenge lies not only in developing protective tools, but in ensuring that major tech companies adhere to strict ethical and security standards to prevent these capabilities from leaking to hostile actors who might exploit them to strike critical infrastructure.
Frequently Asked Questions
What is the new AI model from Anthropic?
It is a highly advanced model possessing superior, independent capabilities to discover security vulnerabilities in software and operating systems, and to generate practical ways to exploit them without requiring direction from security experts.
Why is this model raising concern among governments and global banks?
Because it is capable of identifying thousands of dangerous, unknown vulnerabilities in financial systems and web browsers, making it a devastating cyber weapon if it falls into the wrong hands, especially since it poses a direct threat to unpatched legacy banking systems.
Will this model be available for public use?
No, the developing company confirmed that it does not plan to make the model available to the general public due to its extreme danger, and has currently limited its use to a restricted number of partner organizations and government agencies within a strictly controlled testing environment.
