Introducing Claude Opus 5
…However, it remains substantially behind Mythos 5 on the exploitation of those vulnerabilities—that is, in turning vulnerabilities into material cyber threats. This is illustrated by Opus 5’s performance on OSS…
Search
Mapping AI-enabled cyber threats: Insights from the LLM ATT&CK Navigator
…Live exploitation and pivoting : Operating within GTG-1002’s scaffolding, the AI exploited an SSRF vulnerability in a public-facing web server to proxy commands into the internal cloud environment, harvested SSH…
Donating another $20 million to Public First Action
…Earlier this year, Claude Mythos Preview discovered thousands of high-severity software vulnerabilities, including some in every major operating system and browser. We chose to release it to a limited set of…
Discovering cryptographic weaknesses with Claude
…Introduction When we launched Claude Mythos Preview, we showed it was able to autonomously find and exploit vulnerabilities in almost every piece of software we pointed it at. This included several major…
What we learned mapping a year’s worth of AI-enabled cyber threats
…it executed commands, exploited vulnerabilities, stole credentials, and made tactical decisions, only requiring human input at a few key moments. There is no ATT&CK ID for this type of agentic orchestration…
How we contain Claude across products
…everything before the trust dialog Between mid-2025 and January 2026, we received reports of vulnerabilities in Claude Code through our responsible disclosure program. Three exploited code that executes before the user…
AI models on realistic cyber ranges
Frontier Red Team AI models are showing a greater ability to find and exploit vulnerabilities on realistic cyber ranges Jan 16, 2026 In a recent evaluation of AI models’ cyber capabilities, current…
LLMs and biorisk
…in biology Measuring LLMs’ impact on N-day exploits In cybersecurity, a large fraction of real-world harm comes from N-days: vulnerabilities that have already been publicly disclosed, but only patched…
An off switch for dual use knowledge in AI models
…For example, knowledge of cybersecurity can help patch critical security vulnerabilities, or it can be used to exploit them. Knowledge of virology can help a researcher create a vaccine, but it can…
Trustworthy agents in practice
…keeping humans in control, aligning with human values, securing agents’ interactions, maintaining transparency, and protecting privacy. In this post, we explain how agents work, describe how those principles play out in specific…