Anthropic's Mythos Finds Thousands of Zero-Day Vulnerabilities but Less Than 1% Get Patched

CNBC·medium signal

Despite Claude Mythos uncovering thousands of high-severity vulnerabilities — including flaws 16 and 27 years old in open-source projects like FFmpeg maintained by small volunteer teams — CNBC reports fewer than 1% have been patched. Complicating the narrative, security firm Aisle demonstrated it could replicate Mythos's findings using older, cheaper, publicly available models. The gap between vulnerability discovery and remediation may be the real crisis, not the models themselves.