America’s Cybersecurity Agency: The Missing Link in Anthropic’s Mythos Rollout

US Federal Agencies Embrace New Cybersecurity Model, But Central Coordinator Stays Out

Numerous US federal agencies have adopted Anthropic’s innovative cybersecurity model to identify vulnerabilities, with one notable exception: the nation’s central cybersecurity coordinator.

According to a report by Axios, the Cybersecurity and Infrastructure Security Agency (CISA) has not been granted access to Mythos Preview, a tool praised by Anthropic for its effectiveness in discovering and addressing security flaws. In contrast, agencies such as the Commerce Department and the National Security Agency (NSA) have reportedly integrated the model into their operations. The Trump administration is currently in negotiations to expand access to the tool, as per Axios. Anthropic has confirmed ongoing discussions with US government officials regarding the capabilities of Claude Mythos Preview, including offensive and defensive cyber capabilities. While CISA was briefed on the tool, Anthropic declined to provide further comments, and CISA has not responded to requests for comment.

The limitations imposed on CISA, coupled with other measures to reduce its workforce and funding, indicate a lack of prioritization of the agency’s operations by the administration. This situation raises concerns about the potential compromise of digital security. CISA, a component of the Department of Homeland Security, plays a crucial role as the central coordinating body for cybersecurity information, assisting state and local officials in safeguarding elections and public utilities against vulnerabilities and responding to cyberattacks. However, political attacks on CISA have escalated, particularly following its declaration that the 2020 election was the “most secure in American history,” prompting the dismissal of the agency’s lead official by President Trump.

Since resuming office, the Trump administration has implemented various measures that further curtail the agency’s mandate. Similar to other federal entities, CISA experienced a talent drain during cost-cutting initiatives by the Department of Government Efficiency, with some staff redirected to immigration-related tasks under DHS. The agency’s acting director informed Congress about limited resources to detect cyber intrusions during the current DHS shutdown, yet the administration seeks additional budget cuts amounting to hundreds of millions.

The reported lack of access by CISA to Anthropic’s Mythos Preview raises questions about why an agency responsible for safeguarding critical infrastructure from cyber threats cannot evaluate a tool that has identified security issues across major operating systems and web browsers, as stated by Anthropic. Anthropic is selectively granting access to the tool to key institutions to enhance cyber defenses early on, according to Anthropic’s frontier red team cyber lead Newton Cheng in an interview with The Verge. However, as it stands, CISA appears to be excluded from this opportunity.