Claude Mythos Found a 27-Year-Old Bug. The Hard Part Is What Happens Next

Anthropic built a model they decided was too dangerous to release. That sentence would sound like marketing if the technical details were not sitting right next to it. Claude Mythos Preview autonomously discovered and exploited zero-day vulnerabilities across major operating systems and browsers. Not “found potential weaknesses.” Exploited them. The Firefox JavaScript shell exploitation rate was 72.4 percent across repeated runs. It found a 27-year-old bug in OpenBSD. It found a 16-year-old vulnerability in FFmpeg. Finding the FFmpeg bug cost approximately $10,000 over several hundred runs, which makes it an expensive research tool but not an inaccessible one once the model is out in the world and someone else is paying the compute bill. ...

April 19, 2026 · Mario Martinez Jr.