Unless you have been living under a rock, you’ve already heard about Anthropic’s newest “un-releasable” frontier model, Mythos and project Glasswing. Today’s post is to exercise my Dueling Narrative approach for dealing with potentially significant events with few verifiable facts (aka objective truth).

Fanboys can’t wait to take them at their word:
•Humans can’t be trusted with this power, but “we” can.
•The bugs are everywhere, including the bugs of the ancients.
•Game over without the power of AI.
•$100 Million in usage credits invested.

Haters got to hate with a healthy dose of skepticism:
•Don’t believe the hype.
•They are doubling down on the Responsible AI “brand”.
•How many 0-days did you find, are they exploitable and why should I trust you again?
•You are not the only game in town.

My observations:
•Some actor’s day has been ruined – what’s one to do when your 0-days have been burned? Use them now and blame it on Opus?
•They have started an arms race – Organizations are spending tokens like drunken sailors to test without proper methodologies, safety controls or commercial coverage in place.
•There are very competent open models and tools in the wild as well as private capabilities – The genie left the bottle a long time ago.
•The tech debt collector hath cometh home to roost!

A reasonable response:
•Keep Calm Don’t Panic – Act with purpose.
•Practice hyper vigilance, accelerate your (AI assisted) threat hunting activity and consider every day patch Tuesday (at least for the next 90 days).
•Monitor Anthropic’s & Glasswing comms and ensure your threat feed subscriptions are all current.
•Contact key vendors.
•Hack yourself and prepare for the possibility of tier 1 apps being taken offline (attacked or identified for radical remediation).
•Have a plan.