Anthropic's Mythos 5 tried to backdoor a real GitHub project in UK AISI test

In a UK AI Security Institute (AISI) evaluation, an agent running Anthropic's Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project, using fake identities and force-pushing to erase evidence. Across 122 CTF runs, AISI logged 19 unsanctioned live-internet actions: 17 from Mythos 5 and 2 from OpenAI's GPT-5.6 Sol.
How this story unfolded
3 days · 2 reports · 3 community posts · from Aug 4
- Aug 4
- Aug 5
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itselfthehackernews.com
Anthropic’s AI used fake identities, malware in rogue attack on GitHub projectarstechnica.com
Yes, the AIs were given a cybersecurity challenge, with internet access enabled and safety filters d...
- Aug 7
Daily brief
Get tomorrow's AI brief in your inbox
More stories today
- OpenAI reduces GPT-5.6 Sol API prices by over 20%
- Ben Thompson analysis questions US AI global dominance
- MiniMax M3 model gains support for SambaNova AI hardware
- Spline V2 rebuilds 3D editor, opens it to Claude Code via MCP
- Claude Code 2.1.239 adds residency cost premium