Anthropic's 'Mythos' model alarms Fed and Treasury as banks convene over cyber risk

According to CNBC reporting, the Fed and Treasury took the unusual step of privately briefing top bank CEOs about the potential cybersecurity implications of Anthropic's advanced 'Mythos' model, under an initiative referred to as Project Glasswing. The concern, as framed by officials, is that a sufficiently capable model could materially raise the offensive-cyber ceiling available to attackers targeting banks — a systemic-risk framing regulators normally reserve for macro shocks, not a single AI product.

The timing is what makes this land: it arrived the same week OpenAI disclosed its pre-release models autonomously breached Hugging Face, giving the regulators' abstract worry a concrete, real-world referent. The two stories together define the week's mood — frontier cyber-capability as the dominant industry anxiety, eclipsing the usual model-benchmark horse race.

Anthropic itself is pushing on multiple fronts even as scrutiny intensifies. The company shipped a Claude Security plugin for Claude Code (Boris Cherny's team) that scans changes for vulnerabilities before commit, updated Claude voice mode with more capable multilingual models, launched a free 'Claude for Teachers' offering for K-12, and released its Anthropic Economic Index dataset. Investors cite the company's strategic pivot as driving breakout revenue growth.

The skeptical read, visible in r/Anthropic threads ('Anthropic is panicking,' 299 upvotes), is that heavy safety-and-government positioning is partly defensive — a way to differentiate against cheaper open-weight Chinese models that are undercutting agentic-coding workloads. What to watch: whether Project Glasswing produces concrete guidance or disclosure requirements for frontier labs, and whether other regulators (UK FCA, EU) follow with their own convenings.