Cyber Security News

NSA Confirms Use of Anthropic’s Mythos Despite Pentagon Blacklist

The National Security Agency (NSA) is actively using Anthropic’s highly restricted “Mythos” artificial intelligence model, despite the developer currently being on the Department of Defense (DoD) blacklist.

According to recent intelligence reports highlighted by the International Cyber Digest, the NSA is one of an exclusive group of approximately 40 organizations globally granted access to the tightly controlled Mythos Preview.

Advanced Offensive Cyber Capabilities

Anthropic has kept the Mythos model heavily guarded due to its unprecedented technical proficiency.

Unlike standard language models, Mythos is highly capable of navigating complex technical environments and identifying security flaws.

The model provides several critical capabilities that align with the NSA’s operational needs:

  • Rapid identification of complex vulnerabilities in software systems.
  • Generation of functional exploit paths for offensive cyber operations.
  • Advanced automated code auditing and threat hunting.
  • Accelerated defensive patching for critical infrastructure systems.

Because these offensive cyber capabilities are considered too dangerous for wider public or commercial release, Anthropic has severely limited its distribution.

However, for an intelligence agency tasked with defending national cybersecurity, these exact features make the AI model an indispensable technical asset.

The NSA’s ongoing use of Mythos highlights a significant internal divide within the U.S. defense apparatus. Just months prior, the Pentagon officially designated Anthropic as a “supply chain risk.”

Notably, Anthropic was the first American artificial intelligence firm to receive this severe security classification publicly.

This fallout stemmed from failed negotiations regarding the DoD’s broader use of commercial AI. Anthropic reportedly rejected the military’s demands for unrestricted access to its primary Claude AI models.

The company cited strict internal safety guidelines and expressed ethical concerns that broad military access could lead to mass surveillance applications.

In response, the Pentagon severed its contracts with the developer, triggering ongoing legal battles and an agency-wide ban.

Despite the ongoing lawsuit and the DoD-wide blocklist, the intense demands of modern cybersecurity have apparently driven the NSA to secure an independent arrangement.

The intelligence agency’s urgent need for cutting-edge vulnerability detection systems has seemingly bypassed the broader Pentagon embargo, prioritizing national cyber defense over bureaucratic restrictions.

Recent high-level meetings between Anthropic’s CEO and top U.S. officials indicate that diplomatic backchannels are operating outside standard Pentagon channels.

These discussions signal potential progress in creating a specialized framework. Such an agreement could allow critical intelligence agencies to utilize powerful commercial AI tools like Mythos while still respecting the developer’s core safety boundaries and ethical deployment rules.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

2 days ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

2 days ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

2 days ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago