A small group of people in a private Discord got into Anthropic's newest and most powerful AI, called Mythos, and the story came out this week. The twist is that Anthropic had decided NOT to release this model publicly because they said it was too dangerous. They shipped it quietly to a handful of partners like Apple, Google, Microsoft, JPMorgan, and some cybersecurity firms. The Discord crew was inside the same day the model was announced.

The way they did it isn't some elite hacking movie. The group used login credentials belonging to an employee at a third-party contractor for Anthropic, and basically guessed the URL because Anthropic uses a predictable naming format for its internal models. No exploits, no malware, just a credential and a lucky guess.

What makes Mythos different from regular AI is that it hunts security holes in software by itself, with nobody telling it where to look. Anthropic says their internal testing turned up thousands of previously unknown bugs across real products, including one sitting in OpenBSD for 27 years. Their stated reason for holding it back was that releasing it publicly would hand attackers a weapon before defenders had a chance to build the countermeasures.

Anthropic's official line is that no actual company systems were touched, only the vendor environment. The people who got in said they were "interested in playing around with new models, not wreaking havoc with them". Could be true, but that's also exactly what you'd say whether it was true or not.

All these Mythos stories landing one after another, marketing materials leaking in late March, the "too dangerous to release" framing, now a hack where the impact stayed contained according to Anthropic. It feels a little too convenient for a company trying to build hype around a model they're technically refusing to sell. It could be a coincidence, or it could be a very effective news cycle.

Where it matters for normal people, a lot of the security software your bank and your workplace run on depends on smaller vendors and contractors. If a top-tier AI lab can't keep its crown jewels behind a proper lock, the odds your HR portal is doing better are slim.

Can labs actually keep a dangerous model locked up, or is this just a very convenient leak?

Hackers got into Anthropic's Mythos, the AI they refused to release because it's too dangerous