Why it matters: Ten days ago, Anthropic was happy to announce its most advanced AI model was going public. Today, almost nobody can use it. On June 12, the Trump administration directed the company to restrict Fable 5 and Mythos 5 to US citizens only – unable to verify nationality at scale, Anthropic's only option was a full global shutdown, cutting off allies, researchers, and its own foreign-national employees with 90 minutes' notice. It's the first time the US government has applied export controls to an AI model, and the consequences are still unfolding.
"Not in weeks, but in hours"
It was Senate testimony that reframed everything. According to reporting by The Economist, Senator Mark Warner disclosed that General Joshua Rudd – who simultaneously leads the NSA and US Cyber Command – told him directly that Anthropic's Mythos model had penetrated nearly all of the NSA's classified systems during an authorized red-team exercise. The timeframe wasn't measured in days or weeks. It was hours.
"Broke into almost all of our classified systems, not in weeks, but in hours," Warner quoted Rudd as saying in the June 11 briefing, one day before the export ban landed.
That testimony remains unconfirmed by any government agency, and the full classified details are not public. But it has rapidly become the most cited explanation for why the administration moved so fast and so hard. If the claim holds up, it represents a landmark moment: a commercial AI model, built for cybersecurity research, autonomously compromising some of the most hardened classified infrastructure on Earth.
What Mythos actually is
When Anthropic first announced Mythos in April, it was blunt: the model was too capable at finding security vulnerabilities to release publicly. Instead of a general launch, Anthropic opened access through Project Glasswing, a controlled program of roughly 200 vetted partners: Amazon, Apple, Google, Microsoft, Nvidia, JPMorgan, and the Linux Foundation among them.
Mythos had already uncovered thousands of real-world vulnerabilities, including a 27-year-old flaw in OpenBSD and 271 new bugs in Mozilla's Firefox 150 browser.
Fable 5, released to the public on June 9, uses the same underlying model with safety classifiers added on top. Those classifiers intercept requests flagged as potentially dangerous and redirect them to a less capable model.
Anthropic's position was that these guardrails made Fable 5 safe for general use. The government's position, sharpened by the Rudd testimony, is that the gap between the two models is not sufficiently protected by those classifiers.
... continue reading