In this episode, Ashish and Caleb discuss the internet-breaking preview of Project Mythos, an unreleased AI model from Anthropic that has shown an unprecedented, terrifying ability to reason through code and automatically generate working zero-day exploits .
We dive into the conversations surrounding Project Glasswing, Anthropic's initiative to share this model with select partners (like Palo Alto and CrowdStrike) before public release, allowing them a 100-day window to patch critical vulnerabilities . Caleb explains why this level of AI reasoning isn't just hype: early testers are reporting that Mythos is not only finding zero-days, but actively detecting dormant intrusions within their own networks .
If you are a CISO or security practitioner, this episode talks about it all. We discuss why the traditional 30-day patch cycle is dead, why "assuming breach" is now mandatory, and why 60% of legacy security vendors might not survive this shift .
Questions asked:
00:00 Introduction: The Hype Around Anthropic's Project Mythos
04:00 What is Project Mythos? (Reasoning and Finding Zero-Days)
06:50 Project Glasswing: The 100-Day Partner Patch Window
08:30 The Controversy: Did Anthropic Pick the Right Partners?
12:30 Why Anthropic Doesn't Have the Compute to Scan the Whole Internet
15:10 The Insider View: Mythos is Finding Dormant Intrusions
16:30 Why 60% of Security Vendors Will Go Away
19:30 Hype vs. Reality: GeoHot's Comments on Small Models
21:30 Eliminating False Positives in Static Code Analysis
23:50 The Zero-Day Clock: Time to Exploit Drops to Under 6 Hours
25:50 The Ethics of Zero-Days: Should Mythos Be Released at All?
34:30 The CISO Action Plan: Speeding Up Patching (Hours vs. Days)
44:50 The 3rd Party SaaS Problem: What to Do When You Can't Patch
46:10 "Assume Breach": Why Deception (Honeypots) is the New Priority
57:30 Empowering Non-Tech Teams to Build Detections
01:02:10 AI Makes Cheesy "Hacker Movies" a Reality
--------------------------------------------------------------------------------
📱AI Security Podcast Social Media📱
_____________________________________
🛜 Website - https://aisecuritypodcast.com/
✉️ AI CyberSecurity Newsletter - https://www.aisecuritynewsletter.ai/
LinkedIn: / ai-security-podcast
#AISecurity #cybersecurity #ai