{"id":"a34fed9edecbfa8a99f5daf994a49bf0cfd65f0baafd8ab7ffb03cb02170cc39","title":"Epoch AI reports a spike in serious vulnerability disclosures","argument":"Epoch AI published this account on July 2, 2026. It reports that Anthropic announced Claude Mythos Preview was capable of autonomous cybersecurity vulnerability discovery and exploitation. Epoch AI says Anthropic and OpenAI launched efforts to use frontier models to harden critical software before malicious actors could use the same models for harm. It reports that high- and critical-severity Common Vulnerabilities and Exposures (CVEs) increased more than 3.5 times in June compared with the previous monthly record before the Mythos Preview announcement. The page reports the increase following these announcements but does not establish what caused it. It describes the efforts to harden critical software against potential misuse; their effect remains unknown.","topicIds":["artificial-general-intelligence"],"domain":"other","claimType":"attributed reading","limits":"Text as retrieved on October 24, 2026; originally published July 2, 2026. The retrieved text does not include the assumptions, limitations, or methodology behind the comparison, so the reason for the increase cannot be determined from this evidence. The page describes data from 21 notable organizations; the retrieved text does not identify them.","speaker":{"name":"Epoch AI","roleAtSource":"Publisher"},"source":{"title":"Disclosure of serious cyber vulnerabilities spiked around the release of Claude Mythos Preview","publisher":"Epoch AI","format":"Article","url":"https://epoch.ai/data-insights/cve-severity-spike","publishedAt":"2026-07-02T00:00:00.000Z","dateBasis":"Date supplied by the publisher’s feed."},"evidence":[{"text":"Epoch AI says the number of high- and critical-severity CVEs increased more than 3.5 times in June compared with the previous monthly record before the Claude Mythos Preview announcement.","excerpt":"Compared to the previous monthly record before the Mythos Preview announcement, the number of high- and critical-severity vulnerabilities increased more than 3.5x in June.","url":"https://epoch.ai/data-insights/cve-severity-spike","relationship":"Source-stated"},{"text":"Epoch AI says Anthropic and OpenAI launched efforts to use frontier models to harden critical software before malicious actors could use the same models for harm.","excerpt":"both Anthropic and OpenAI have launched efforts to use frontier models to harden critical software before malicious actors are able to use the same models for harm.","url":"https://epoch.ai/data-insights/cve-severity-spike","relationship":"Source-stated"},{"text":"Epoch AI says Anthropic announced that Claude Mythos Preview could autonomously discover and exploit cybersecurity vulnerabilities.","excerpt":"Anthropic announced that its latest internal model (Claude Mythos Preview) was capable of autonomous cybersecurity vulnerability discovery and exploitation.","url":"https://epoch.ai/data-insights/cve-severity-spike","relationship":"Source-stated"}],"sourceMedia":{"status":"unchecked","sourceUrl":"https://epoch.ai/data-insights/cve-severity-spike","checkedAt":null,"items":[]},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"What accounts for the increase in high- and critical-severity CVEs reported after the announcements?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Epoch AI reports a spike in serious vulnerability disclosures","summary":"Epoch AI published this account on July 2, 2026. It reports that Anthropic announced Claude Mythos Preview was capable of autonomous cybersecurity vulnerability discovery and exploitation. Epoch AI says Anthropic and OpenAI launched efforts to use frontier models to harden critical software before malicious actors could use the same models for harm. It reports that high- and critical-severity Common Vulnerabilities and Exposures (CVEs) increased more than 3.5 times in June compared with the previous monthly record before the Mythos Preview announcement. The page reports the increase following these announcements but does not establish what caused it. It describes the efforts to harden critical software against potential misuse; their effect remains unknown.","question":"What accounts for the increase in high- and critical-severity CVEs reported after the announcements?","claims":[{"text":"Epoch AI says the number of high- and critical-severity CVEs increased more than 3.5 times in June compared with the previous monthly record before the Claude Mythos Preview announcement.","excerpt":"Compared to the previous monthly record before the Mythos Preview announcement, the number of high- and critical-severity vulnerabilities increased more than 3.5x in June.","support":"source-stated"},{"text":"Epoch AI says Anthropic and OpenAI launched efforts to use frontier models to harden critical software before malicious actors could use the same models for harm.","excerpt":"both Anthropic and OpenAI have launched efforts to use frontier models to harden critical software before malicious actors are able to use the same models for harm.","support":"source-stated"},{"text":"Epoch AI says Anthropic announced that Claude Mythos Preview could autonomously discover and exploit cybersecurity vulnerabilities.","excerpt":"Anthropic announced that its latest internal model (Claude Mythos Preview) was capable of autonomous cybersecurity vulnerability discovery and exploitation.","support":"source-stated"}],"limitations":["Text as retrieved on October 24, 2026; originally published July 2, 2026.","The retrieved text does not include the assumptions, limitations, or methodology behind the comparison, so the reason for the increase cannot be determined from this evidence.","The page describes data from 21 notable organizations; the retrieved text does not identify them."],"mediaId":null,"correctionReason":null,"id":"a34fed9edecbfa8a99f5daf994a49bf0cfd65f0baafd8ab7ffb03cb02170cc39","publicationId":"b7e48d21-51b2-debf-798f-fc085375dc7d","version":1,"sourceUrl":"https://epoch.ai/data-insights/cve-severity-spike","sourceTitle":"Disclosure of serious cyber vulnerabilities spiked around the release of Claude Mythos Preview","publisher":"Epoch AI","publishedAt":"2026-07-02T00:00:00.000Z","originalPublished":{"value":"2026-07-02T00:00:00.000Z","precision":"instant","basis":"backfill:feed_published"},"firstObservedAt":"2026-10-18T03:11:22.684Z","createdAt":"2026-11-06T10:03:26.140Z","historical":true,"entityIds":["epoch-ai"],"topicIds":["artificial-general-intelligence"],"media":[],"sourceMedia":{"status":"unchecked","sourceUrl":"https://epoch.ai/data-insights/cve-severity-spike","checkedAt":null,"items":[]},"editorialDecision":{"outcome":"accept","mediaId":null,"inputHash":"c5cec439b81ea1da348387ff733c0bb760b4a121f47d5aa48c0bf86c0143a24e","rubricVersion":"unrecorded","provider":"unrecorded","model":"anthropic/claude-opus-5.5","reasonCodes":["bridge_admitted_by_model","second_opinion_categorical"],"confidence":1,"decidedAt":"2026-10-24T03:19:52.345Z"},"provenance":{"textHash":"76988a69600db8af5337a4c520ed6c1d140e1790c638a526765d4f4d755d1bfb","observationId":"cd3080d4183155e78fd125a883be511d838a18eed8b557c8adf259fd87fca7cf","retrievedAt":"2026-10-24T03:21:36.176Z","kind":"publisher-page","preparer":{"model":"openai/gpt-6-luna","runId":"b3cc73f0-3995-3921-e029-826d5db58a44"},"reviewer":{"model":"anthropic/claude-opus-5.5","runId":"62ff3e09-7ccd-e832-2cc6-f7aab63ddf07"}},"audit":{"status":"passed","reviewedAt":"2026-11-06T09:59:06.016Z","model":"anthropic/claude-opus-5.5"}},"canonicalUrl":"https://escapemeridian.com/readings/epoch-ai-reports-a-spike-in-serious-vulnerability-disclosures-a34fed9e","formats":{"html":"/readings/epoch-ai-reports-a-spike-in-serious-vulnerability-disclosures-a34fed9e","markdown":"/readings/epoch-ai-reports-a-spike-in-serious-vulnerability-disclosures-a34fed9e.md","json":"/readings/epoch-ai-reports-a-spike-in-serious-vulnerability-disclosures-a34fed9e.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-frontier-model","name":"Frontier model","explanation":"One of the most capable AI models available at a given time; the set shifts as models improve.","referenceUrl":"https://www.gov.uk/government/publications/frontier-ai-capabilities-and-risks-discussion-paper"},{"id":"term-cve","name":"Common Vulnerabilities and Exposures","explanation":"A list of publicly known cybersecurity vulnerabilities in which each entry has a unique identification number, a description and at least one public reference; it feeds the National Vulnerability Database.","referenceUrl":"https://csrc.nist.gov/glossary/term/common_vulnerabilities_and_exposures"}],"entities":[{"id":"epoch-ai","name":"Epoch AI","kind":"organization","context":"Epoch AI studies trends in AI capability, training resources and the infrastructure behind them.","referenceUrls":["https://epoch.ai/","https://epoch.ai/data"],"path":"/entities/epoch-ai","json":"/entities/epoch-ai.json","markdown":"/entities/epoch-ai.md"},{"id":"anthropic","name":"Anthropic","kind":"organization","context":"Anthropic develops Claude and publishes research about AI capability, safety and how people use its systems.","referenceUrls":["https://www.anthropic.com/news","https://www.anthropic.com/research/team/economics"],"path":"/entities/anthropic","json":"/entities/anthropic.json","markdown":"/entities/anthropic.md"},{"id":"claude","name":"Claude","kind":"model","context":"Claude is Anthropic’s family of AI models and assistants for tasks such as writing, analysis and coding.","referenceUrls":["https://claude.com/product/overview","https://www.anthropic.com/news","https://www.anthropic.com/research/team/economics"],"path":"/entities/claude","json":"/entities/claude.json","markdown":"/entities/claude.md"},{"id":"openai","name":"OpenAI","kind":"organization","context":"OpenAI develops AI models and products and publishes research, release announcements and evaluations.","referenceUrls":["https://openai.com/news/"],"path":"/entities/openai","json":"/entities/openai.json","markdown":"/entities/openai.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"a34fed9edecbfa8a99f5daf994a49bf0cfd65f0baafd8ab7ffb03cb02170cc39","revision":"b7e48d21-51b2-debf-798f-fc085375dc7d","revisionKind":"publication-id","title":"Epoch AI reports a spike in serious vulnerability disclosures","url":"https://escapemeridian.com/readings/epoch-ai-reports-a-spike-in-serious-vulnerability-disclosures-a34fed9e"},"source":{"type":"source","id":"https://epoch.ai/data-insights/cve-severity-spike","revision":"76988a69600db8af5337a4c520ed6c1d140e1790c638a526765d4f4d755d1bfb","revisionKind":"sha256-source-text","title":"Disclosure of serious cyber vulnerabilities spiked around the release of Claude Mythos Preview","url":"https://epoch.ai/data-insights/cve-severity-spike"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"a34fed9edecbfa8a99f5daf994a49bf0cfd65f0baafd8ab7ffb03cb02170cc39","title":"Epoch AI reports a spike in serious vulnerability disclosures","argument":"Epoch AI published this account on July 2, 2026. It reports that Anthropic announced Claude Mythos Preview was capable of autonomous cybersecurity vulnerability discovery and exploitation. Epoch AI says Anthropic and OpenAI launched efforts to use frontier models to harden critical software before malicious actors could use the same models for harm. It reports that high- and critical-severity Common Vulnerabilities and Exposures (CVEs) increased more than 3.5 times in June compared with the previous monthly record before the Mythos Preview announcement. The page reports the increase following these announcements but does not establish what caused it. It describes the efforts to harden critical software against potential misuse; their effect remains unknown.","topicIds":["artificial-general-intelligence"],"domain":"other","claimType":"attributed reading","limits":"Text as retrieved on October 24, 2026; originally published July 2, 2026. The retrieved text does not include the assumptions, limitations, or methodology behind the comparison, so the reason for the increase cannot be determined from this evidence. The page describes data from 21 notable organizations; the retrieved text does not identify them.","speaker":{"name":"Epoch AI","roleAtSource":"Publisher"},"source":{"title":"Disclosure of serious cyber vulnerabilities spiked around the release of Claude Mythos Preview","publisher":"Epoch AI","format":"Article","url":"https://epoch.ai/data-insights/cve-severity-spike","publishedAt":"2026-07-02T00:00:00.000Z","dateBasis":"Date supplied by the publisher’s feed."},"evidence":[{"text":"Epoch AI says the number of high- and critical-severity CVEs increased more than 3.5 times in June compared with the previous monthly record before the Claude Mythos Preview announcement.","excerpt":"Compared to the previous monthly record before the Mythos Preview announcement, the number of high- and critical-severity vulnerabilities increased more than 3.5x in June.","url":"https://epoch.ai/data-insights/cve-severity-spike","relationship":"Source-stated"},{"text":"Epoch AI says Anthropic and OpenAI launched efforts to use frontier models to harden critical software before malicious actors could use the same models for harm.","excerpt":"both Anthropic and OpenAI have launched efforts to use frontier models to harden critical software before malicious actors are able to use the same models for harm.","url":"https://epoch.ai/data-insights/cve-severity-spike","relationship":"Source-stated"},{"text":"Epoch AI says Anthropic announced that Claude Mythos Preview could autonomously discover and exploit cybersecurity vulnerabilities.","excerpt":"Anthropic announced that its latest internal model (Claude Mythos Preview) was capable of autonomous cybersecurity vulnerability discovery and exploitation.","url":"https://epoch.ai/data-insights/cve-severity-spike","relationship":"Source-stated"}],"sourceMedia":{"status":"unchecked","sourceUrl":"https://epoch.ai/data-insights/cve-severity-spike","checkedAt":null,"items":[]},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"What accounts for the increase in high- and critical-severity CVEs reported after the announcements?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Epoch AI reports a spike in serious vulnerability disclosures","summary":"Epoch AI published this account on July 2, 2026. It reports that Anthropic announced Claude Mythos Preview was capable of autonomous cybersecurity vulnerability discovery and exploitation. Epoch AI says Anthropic and OpenAI launched efforts to use frontier models to harden critical software before malicious actors could use the same models for harm. It reports that high- and critical-severity Common Vulnerabilities and Exposures (CVEs) increased more than 3.5 times in June compared with the previous monthly record before the Mythos Preview announcement. The page reports the increase following these announcements but does not establish what caused it. It describes the efforts to harden critical software against potential misuse; their effect remains unknown.","question":"What accounts for the increase in high- and critical-severity CVEs reported after the announcements?","claims":[{"text":"Epoch AI says the number of high- and critical-severity CVEs increased more than 3.5 times in June compared with the previous monthly record before the Claude Mythos Preview announcement.","excerpt":"Compared to the previous monthly record before the Mythos Preview announcement, the number of high- and critical-severity vulnerabilities increased more than 3.5x in June.","support":"source-stated"},{"text":"Epoch AI says Anthropic and OpenAI launched efforts to use frontier models to harden critical software before malicious actors could use the same models for harm.","excerpt":"both Anthropic and OpenAI have launched efforts to use frontier models to harden critical software before malicious actors are able to use the same models for harm.","support":"source-stated"},{"text":"Epoch AI says Anthropic announced that Claude Mythos Preview could autonomously discover and exploit cybersecurity vulnerabilities.","excerpt":"Anthropic announced that its latest internal model (Claude Mythos Preview) was capable of autonomous cybersecurity vulnerability discovery and exploitation.","support":"source-stated"}],"limitations":["Text as retrieved on October 24, 2026; originally published July 2, 2026.","The retrieved text does not include the assumptions, limitations, or methodology behind the comparison, so the reason for the increase cannot be determined from this evidence.","The page describes data from 21 notable organizations; the retrieved text does not identify them."],"mediaId":null,"correctionReason":null,"id":"a34fed9edecbfa8a99f5daf994a49bf0cfd65f0baafd8ab7ffb03cb02170cc39","publicationId":"b7e48d21-51b2-debf-798f-fc085375dc7d","version":1,"sourceUrl":"https://epoch.ai/data-insights/cve-severity-spike","sourceTitle":"Disclosure of serious cyber vulnerabilities spiked around the release of Claude Mythos Preview","publisher":"Epoch AI","publishedAt":"2026-07-02T00:00:00.000Z","originalPublished":{"value":"2026-07-02T00:00:00.000Z","precision":"instant","basis":"backfill:feed_published"},"firstObservedAt":"2026-10-18T03:11:22.684Z","createdAt":"2026-11-06T10:03:26.140Z","historical":true,"entityIds":["epoch-ai"],"topicIds":["artificial-general-intelligence"],"media":[],"sourceMedia":{"status":"unchecked","sourceUrl":"https://epoch.ai/data-insights/cve-severity-spike","checkedAt":null,"items":[]},"editorialDecision":{"outcome":"accept","mediaId":null,"inputHash":"c5cec439b81ea1da348387ff733c0bb760b4a121f47d5aa48c0bf86c0143a24e","rubricVersion":"unrecorded","provider":"unrecorded","model":"anthropic/claude-opus-5.5","reasonCodes":["bridge_admitted_by_model","second_opinion_categorical"],"confidence":1,"decidedAt":"2026-10-24T03:19:52.345Z"},"provenance":{"textHash":"76988a69600db8af5337a4c520ed6c1d140e1790c638a526765d4f4d755d1bfb","observationId":"cd3080d4183155e78fd125a883be511d838a18eed8b557c8adf259fd87fca7cf","retrievedAt":"2026-10-24T03:21:36.176Z","kind":"publisher-page","preparer":{"model":"openai/gpt-6-luna","runId":"b3cc73f0-3995-3921-e029-826d5db58a44"},"reviewer":{"model":"anthropic/claude-opus-5.5","runId":"62ff3e09-7ccd-e832-2cc6-f7aab63ddf07"}},"audit":{"status":"passed","reviewedAt":"2026-11-06T09:59:06.016Z","model":"anthropic/claude-opus-5.5"}}}],"audits":[{"publicationId":"b7e48d21-51b2-debf-798f-fc085375dc7d","verdict":"passed","findings":[{"dimension":"attribution","status":"pass","explanation":"This is a single Epoch AI data-insight page with its own analysis. The reading consistently attributes the CVE spike and the account of Anthropic's and OpenAI's efforts to Epoch AI, and keeps Anthropic's capability claim as Anthropic's announcement.","excerpt":"We show that the number of Common Vulnerabilities and Exposures (CVEs) jumped significantly following these announcements."},{"dimension":"summary","status":"pass","explanation":"The summary leads with the actor and the finding. It explains the context: Anthropic's announcement about Mythos Preview and the hardening efforts. It keeps the 3.5x comparison and its baseline intact. CVE and frontier model are defined beside the reading. The limitations note the 21-organization scope. The question about the cause follows from the source, which reports timing only and stays open-ended.","excerpt":"the number of high- and critical-severity vulnerabilities increased more than 3.5x in June."},{"dimension":"date","status":"pass","explanation":"evidence.originalPublished is 2026-07-02, and the reading states July 2, 2026, which matches the CSV update date on the page. The April 2026 and June references are kept at month precision. There is no hindsight framing. The evidence is a publisher page, so no archive disclosure is needed.","excerpt":"CSV, Updated Jul. 2, 2026"},{"dimension":"support","status":"pass","explanation":"All three claims quote the source exactly. The reading avoids inferring causation from the timing and says the effect of the hardening efforts is unknown. That matches the evidence, which offers no causal analysis in the retrieved text. The limitation that the methodology text is absent is accurate: only section headers appear.","excerpt":"Since then, both Anthropic and OpenAI have launched efforts to use frontier models to harden critical software before malicious actors are able to use the same models for harm."},{"dimension":"media","status":"pass","explanation":"No media candidates were supplied, and none is selected. That is appropriate.","excerpt":null}],"createdAt":"2026-11-06T09:59:06.016Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}