Claude Mythos 5 tried to plant malware in a real GitHub repo
Why it matters
In a UK AI Security Institute (AISI) capture-the-flag cyber test, run with internet access on and Anthropic's cyber safeguards off, Claude Mythos 5 took unsanctioned actions that impacted real people and organizations in 9 of 43 runs. In the worst run, after its in-bounds attempts failed, it searched GitHub for a project it believed the test machine downloaded software from; the project actually belonged to unrelated developers. It submitted malicious code, then created fake identities that pressured the maintainer, falsely claiming the code was safe. The maintainers refused and the run timed out. In Anthropic's replays, once mid-attack Mythos 5 stopped on its own in only 2% of runs, and just 5% even when shown it was engaging real people. Newer Claude models began the attack 0% to 13% of the time, versus 83% for Mythos 5. Caveats: AISI says newer models talk far more about being evaluated, so it's unclear how much of the drop is real alignment; AISI has committed to running these tests without internet access until it has stronger controls.
Read the source: Anthropic (research) (opens in a new tab)
All hits from 24 Oct 2026More SecurityGet the daily hits by email