Cyber security just had its Deep Blue moment

Anthropic just gave an update on Mythos — and it’s worse than we thought. 6,202 high/critical findings. 75 have been patched. A 1.2% patch rate.

The slowdown here is that the whole world runs on open source software, and open source maintainers need, on average, two weeks to confirm, patch, and release a fix for a serious vulnerability. There just aren’t enough hands out there for the volume of patches Mythos is finding.

To put this in perspective, Mythos Preview was rumored to be first tested in February. Glasswing was already underway by April 9th. It’s now the end of May. So if you’re keeping count, we’ve had on average less than one patched high or critical security flaw a day since Mythos Preview was created.

The patches and disclosures will start rolling out faster due to the mechanics of disclosure windows — but we’ve hit an inflection point with cyber security. The open source community, the software we all depend on — it can no longer keep up with AIs.

There’s a general adage that open source is about six months behind frontier LLMs — and we’re at 3 months since Mythos was created. So there’s a race against a very real clock here: if DeepSeek or Moonshot releases a Mythos class model, the whole world is going to be shutting off their computers at night until open source software maintainers get through their backlog.

Reminds me of the moment Deep Blue, the two black towers of server racks IBM put together to play chess, finally cornered Kasparov, the world champion at the time. Kasparov, alternating between despondent and in awe, said this at the time:

“I could feel — I could smell — a new kind of intelligence across the table.”

We’re in the midst of the Deep Blue moment for Cyber Security, one where the world has moved just a little to make room for a new intelligence.

And maybe not today, maybe not everywhere tomorrow, but soon — we’re going to look back on the days when humans were the ones teaching machines how to keep our data secure.

Full update here. Worth the read: https://lnkd.in/e8Y9et-6