Anthropic is reportedly changing its earlier policy around sharing information discovered using its powerful cybersecurity-focused AI model Mythos. According to a report by Reuters, the company said users of its Mythos cybersecurity model will now be allowed to share cyber threat information with other organizations that may face similar security risks. The move comes as Anthropic expands testing of the unreleased Claude Mythos Preview model under a controlled initiative called Project Glasswing. The program includes major technology companies such as
Amazon, Microsoft, Nvidia and Apple, Reuters reported.
Anthropic loosens sharing restrictions
Anthropic announced Mythos on April 7 as part of Project Glasswing, a restricted cybersecurity initiative that allows selected organizations to use the advanced AI model for defensive security work. The model’s advanced coding capabilities reportedly give it an unusually strong ability to identify cybersecurity weaknesses and even develop methods to exploit them.
Last week, Anthropic informed participating organizations that they are generally allowed to publicly disclose their involvement in Project Glasswing and share findings, tools, code and best practices developed through the initiative.
“We fully support our partners sharing findings with each other and companies outside of Glasswing to triage vulnerabilities,” an Anthropic spokesperson said in a statement quoted by Reuters.
The spokesperson added: “While there was never a specific Glasswing NDA, confidentiality protections were something partners asked for at the outset and were built into agreements partners signed.”
Why Anthropic changed its approach
Reuters reported that the earlier confidentiality protections were introduced because participating companies wanted safeguards before sharing sensitive cybersecurity findings and worried about becoming targets for attackers.
Anthropic now says the program has evolved enough to allow broader sharing of information for defensive purposes.
“As the program has matured, we've adapted them to ensure key information can be shared broadly - including outside the program - for maximum defensive impact,” the spokesperson told the news agency.
According to Reuters, Anthropic said partners may now share cybersecurity findings with security teams at other companies, regulators, government agencies, open-source developers, industry groups and even the media, while still following responsible disclosure practices.