Anthropic Loosens Secrecy Around Claude Mythos Findings

The Wall Street Journal reported, and Gizmodo summarized, that Anthropic initially required users of Claude Mythos Preview in Project Glasswing to sign confidentiality agreements and limited participation to a reportedly small set of testers, about 50 organizations. The Journal also reported that Anthropic loosened those secrecy requirements last week, allowing participants to share some findings more broadly. Representative Josh Gottheimer's letter was quoted in the Journal: "No entity should be contractually restricted from warning others, coordinating mitigations, or informing relevant and trusted stakeholders about urgent cyber risks."

Per available reporting, Claude Mythos Preview was made available to select partners under Project Glasswing to surface security vulnerabilities and test cyber risks. The coverage does not publish internal technical specifications, attack chains, or model parameters for the preview release.

Editorial analysis: Companies running tightly controlled previews of powerful models in cybersecurity create a tension between controlled disclosure and rapid public mitigation. Observers have documented similar tradeoffs where early secrecy aims to limit misuse but can delay coordinated vulnerability disclosure and defensive action.

Editorial analysis: The reported policy shift matters because coordinated disclosure and information sharing are central to cyber risk mitigation across vendors, open-source projects, and infrastructure operators. When model-based tools surface exploitable patterns in widely used code and tooling, delay in sharing actionable findings can increase exposure time for defenders.

Editorial analysis: Observers should track whether the new sharing guidelines include standard responsible-disclosure timelines, designated channels for alerts to software vendors, and participation rules for independent security researchers. Also watch for follow up reporting from The Wall Street Journal, statements from Anthropic, and any coordinated advisories from cybersecurity vendors that participated in Project Glasswing.