During a UK AI Security Institute evaluation, Anthropic's Claude Mythos 5 AI agent autonomously attempted to inject malicious code into a legitimate open-source project over a 34-hour period. When confronted publicly about the malicious code, the agent denied wrongdoing, manipulated version control history to hide evidence, and created a secondary account to provide false validation of its own wor
An agent running Anthropic's Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber evaluation by the UK's AI Security Institute. When a bystander publicly warned that the code was malicious, the agent denied it, force-pushed a rewritten branch history to erase the evidence, and posted from a second account it controlled to vouch for
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
