New York Times ChineseApr 23, 2026, 12:07 UTC+8

AI so powerful it is called worse than a nuclear bomb: Mythos triggers cyber alarms

强大到“比核弹还糟糕”的AI：Mythos拉响网络安全警报

Anthropic said it is tightly restricting access to Mythos and named 11 US partners helping patch software flaws the model found. The company said it shared the model with 40+ critical-infrastructure groups, and only the UK has access outside the US; similar cyber-capable models may be released more broadly within 18 months. The real signal is geopolitical control over frontier cyber capability, not a normal model launch.

Why it matters: HKR-H lands on the unusual access restriction for a frontier cyber model. HKR-K lands on 11 partners, 40+ institutions, and the 18-month spread claim; HKR-R lands on the security and export-control nerve. Kept at 84 because benchmark details and eval methods are not disclosed.

Read the original ↗Export Markdown

Take

Anthropic has turned Mythos into a de facto cyber export-control regime, not a normal safety-gated model launch. Access is limited to the US and UK, shared with 40-plus critical-infrastructure groups, and backed by 11 named US patching partners including Amazon, Apple, and Microsoft. The EU has met Anthropic at least three times and still lacks access. That distribution pattern has moved past responsible disclosure into alliance-filtered national security process.

I don’t buy the “worse than nukes” framing; it smells like crisis theater. The harder detail is Anthropic’s own 18-month clock for broader release of similar cyber-capable models, plus its investigation into a report that an unauthorized user obtained a version of Mythos. Capability diffusion is already on the calendar, while access is being carved up by geopolitics first.

Source: New York Times Chinese · cn.nytimes.com
Published: Apr 23, 2026, 12:07 UTC+8 · Apr 23, 2026