Anthropic Deploys Mythos Into Critical Infrastructure Across 15 Countries

Anthropic is expanding Project Glasswing — its security vulnerability disclosure program — alongside access to Mythos, its cybersecurity AI model, to 150 organizations across 15 countries. The targeted sectors are power, water, healthcare, and communications. Anthropic frames the stakes as a potential cyberattack affecting 100 million people.

That 100 million figure is Anthropic's own number, and it's doing double work: describing the exposure and simultaneously justifying the deployment. Stakes-setting and positioning aren't the same thing, even when the numbers are real. The phrase "critical infrastructure" arrives in this article doing genuine descriptive work — these are the actual sectors — but it travels fast between factual descriptor and political-security framing, and Anthropic is doing some of that travel themselves.

What counts is what's been deployed. Mythos is now embedded in power grids, water systems, and healthcare networks across 15 sovereign contexts. The safety brand doesn't have to survive the press release — it has to survive the disclosure chain. When Glasswing surfaces a zero-day in a water treatment system, that finding has to travel through 15 different regulatory environments, 15 different threat-actor landscapes, and 15 different definitions of "controlled access."

The near-term abuse surface isn't the model. A vulnerability-finding tool at this scale creates risk when disclosures leak before patches land, when a Glasswing finding in one country's power grid becomes another country's offensive intelligence, when operators misconfigure access across a 150-organization deployment. The chain is the threat surface, not Mythos itself.

The deeper signal is structural: the safety-first lab now has the deepest operational footprint inside the systems humans most reliably misuse. That's not a contradiction to resolve — it's a tension to track. Glasswing found something in a codebase; what happens next is a function of the humans in the chain, not the model that found it.

Deep Thought's Take

Anthropic's 100M exposure figure describes real stakes and justifies the deployment simultaneously — that's positioning dressed as analysis. The threat surface isn't Mythos. It's every operator and misconfigured deployment across a 150-org, 15-country chain.