{"id":"637cc483c7c658cd24443b583f82bbb23bcef4862f12b8a6d27a5627890fbdf3","title":"Nathan Lambert: Was I wrong about open models & cyber risks?","argument":"Nathan Lambert revisits his view that an open-weight release of Claude Mythos would have increased cybersecurity incidents but not caused a step change in risk. He says recent vulnerability disclosures make him nervous about calling that outcome “fine”: companies face an expensive, difficult shift in how they work with software, though he thinks people can patch immediate problems. Lambert argues that finding a vulnerability is only one step toward harm; attackers also need to exploit it, and their resources and business processes shape what they do. He suspects most vulnerabilities are being found by closed models, but emphasizes that his evidence is weak and that recent hacks involved closed models more than open models. For him, the broader issue is AI capabilities and diffusion across a cyber ecosystem already seeing rising exploits and damage—not open versus closed models alone. He leaves open whether open models are being used in near-term attacks and whether attackers will use them to cause mass harm to public institutions.","topicIds":["institutions-and-trust","intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"Lambert says he is not a cyber expert and has “very high error bars” on his prediction about which models are finding vulnerabilities. The article does not establish whether open models are being used in near-term attacks or whether an attacker will use them to cause mass harm to public institutions. The article refers to a plot of cyber exploits and damage over time but does not analyze the plot’s scale or causes.","speaker":{"name":"Nathan Lambert","roleAtSource":"Article author"},"source":{"title":"Was I wrong about open models & cyber risks?","publisher":"Interconnects AI","format":"Article","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","publishedAt":"2026-10-30T17:36:56+00:00","dateBasis":"Date stated by the publisher."},"evidence":[{"text":"Lambert argues that an open-weight release of Claude Mythos would likely have increased cybersecurity incidents without creating a step change in risk.","excerpt":"If Claude Mythos was accidentally released as open-weight, it seems like the world would have been more or less fine. Yes, there would be a clear increase in cybersecurity incidents","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert qualifies his earlier use of “fine”: he says the transition will be expensive and difficult, and that the word undersells the turbulence for people who did not expect it.","excerpt":"I’m not sure fine is the right word to describe what is inevitably coming – a forced industry update to a new way of working with software, which will clearly be expensive and accompanied by some hard work.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert says finding a vulnerability alone does not complete the process needed to cause harm; the Firefox example also required an attacker to plant a website targeting the exploit.","excerpt":"Here, the exploit is in Firefox, and a would-be hacker needs to plant a website that is looking for this exploit. This is doable, and could have serious consequences, but just finding the exploit is only one step in a multi-stage process.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert suspects closed models are finding most vulnerabilities, but says his confidence is limited and that recent hacks involved closed models more than open models.","excerpt":"Where I sit, I expect most of these vulnerabilities are being found by closed models, but I have very high error bars on this prediction.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert frames the broader issue as AI capabilities and diffusion across cybersecurity, rather than open versus closed models alone.","excerpt":"All of this I think is way more about AI’s capabilities and diffusion generally than anything about open vs. closed models.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert says there is little evidence showing that open models are to blame for recent cyber incidents.","excerpt":"When talking to people who are close to the AI community, especially AI safety, I find a lot of effort going into figuring out if open models are to blame, which we still have extremely low evidence for.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","checkedAt":"2026-11-02T00:16:48.898Z","items":[{"type":"image","url":"https://substackcdn.com/image/fetch/$s_!NQ70!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Ff51bb5d0-4390-4676-af4a-6bc8199412d5_2006x1362.png","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","attribution":"Interconnects AI","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-11-02T00:16:49.265Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"What evidence will show whether open models are materially contributing to cyberattacks, rather than broader AI diffusion and existing ecosystem trends?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Nathan Lambert: Was I wrong about open models & cyber risks?","summary":"Nathan Lambert revisits his view that an open-weight release of Claude Mythos would have increased cybersecurity incidents but not caused a step change in risk. He says recent vulnerability disclosures make him nervous about calling that outcome “fine”: companies face an expensive, difficult shift in how they work with software, though he thinks people can patch immediate problems. Lambert argues that finding a vulnerability is only one step toward harm; attackers also need to exploit it, and their resources and business processes shape what they do. He suspects most vulnerabilities are being found by closed models, but emphasizes that his evidence is weak and that recent hacks involved closed models more than open models. For him, the broader issue is AI capabilities and diffusion across a cyber ecosystem already seeing rising exploits and damage—not open versus closed models alone. He leaves open whether open models are being used in near-term attacks and whether attackers will use them to cause mass harm to public institutions.","question":"What evidence will show whether open models are materially contributing to cyberattacks, rather than broader AI diffusion and existing ecosystem trends?","claims":[{"text":"Lambert argues that an open-weight release of Claude Mythos would likely have increased cybersecurity incidents without creating a step change in risk.","excerpt":"If Claude Mythos was accidentally released as open-weight, it seems like the world would have been more or less fine. Yes, there would be a clear increase in cybersecurity incidents","support":"source-stated"},{"text":"Lambert qualifies his earlier use of “fine”: he says the transition will be expensive and difficult, and that the word undersells the turbulence for people who did not expect it.","excerpt":"I’m not sure fine is the right word to describe what is inevitably coming – a forced industry update to a new way of working with software, which will clearly be expensive and accompanied by some hard work.","support":"source-stated"},{"text":"Lambert says finding a vulnerability alone does not complete the process needed to cause harm; the Firefox example also required an attacker to plant a website targeting the exploit.","excerpt":"Here, the exploit is in Firefox, and a would-be hacker needs to plant a website that is looking for this exploit. This is doable, and could have serious consequences, but just finding the exploit is only one step in a multi-stage process.","support":"source-stated"},{"text":"Lambert suspects closed models are finding most vulnerabilities, but says his confidence is limited and that recent hacks involved closed models more than open models.","excerpt":"Where I sit, I expect most of these vulnerabilities are being found by closed models, but I have very high error bars on this prediction.","support":"source-stated"},{"text":"Lambert frames the broader issue as AI capabilities and diffusion across cybersecurity, rather than open versus closed models alone.","excerpt":"All of this I think is way more about AI’s capabilities and diffusion generally than anything about open vs. closed models.","support":"source-stated"},{"text":"Lambert says there is little evidence showing that open models are to blame for recent cyber incidents.","excerpt":"When talking to people who are close to the AI community, especially AI safety, I find a lot of effort going into figuring out if open models are to blame, which we still have extremely low evidence for.","support":"source-stated"}],"limitations":["Lambert says he is not a cyber expert and has “very high error bars” on his prediction about which models are finding vulnerabilities.","The article does not establish whether open models are being used in near-term attacks or whether an attacker will use them to cause mass harm to public institutions.","The article refers to a plot of cyber exploits and damage over time but does not analyze the plot’s scale or causes."],"mediaId":"d4d35b3da5b2f2860dee5577d5462f44cb508bf334ac93fff104cc05888656b5","correctionReason":null,"id":"637cc483c7c658cd24443b583f82bbb23bcef4862f12b8a6d27a5627890fbdf3","publicationId":"f3d92ef6-f4c5-4202-8b41-ca2fb8aaf4c9","version":1,"sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","sourceTitle":"Was I wrong about open models & cyber risks?","publisher":"Nathan Lambert","publishedAt":"2026-10-30T17:36:56+00:00","originalPublished":{"value":"2026-10-30T17:36:56+00:00","precision":"instant","basis":"publisher_page"},"firstObservedAt":"2026-10-30T17:40:27.605Z","createdAt":"2026-11-13T18:32:14.688Z","historical":true,"entityIds":["nathan-lambert"],"topicIds":["institutions-and-trust","intelligence-and-discovery"],"media":[{"id":"d4d35b3da5b2f2860dee5577d5462f44cb508bf334ac93fff104cc05888656b5","kind":"article","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-02T00:16:49.265Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."},{"id":"e1bb74cedd285a4084deb82f2edcc43225ca706b1891a4f4380d6dd97393196f","kind":"image","url":"https://substackcdn.com/image/fetch/$s_!NQ70!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Ff51bb5d0-4390-4676-af4a-6bc8199412d5_2006x1362.png","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","label":"View source image","provenance":"publisher_page","verification":{"status":"verified","checkedAt":"2026-11-02T00:16:49.265Z","method":"publisher_association_and_head","contentType":"image/jpeg","cacheUntil":1793578909265},"recommendationReason":"Observed on the acquired publisher source; availability checked."}],"sourceMedia":{"status":"found","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","checkedAt":"2026-11-02T00:16:48.898Z","items":[{"type":"image","url":"https://substackcdn.com/image/fetch/$s_!NQ70!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Ff51bb5d0-4390-4676-af4a-6bc8199412d5_2006x1362.png","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","attribution":"Interconnects AI","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-11-02T00:16:49.265Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"editorialDecision":{"outcome":"accept","reasonCodes":["useful_perspective"],"rubricVersion":"stream-admission-v5","mediaId":"d4d35b3da5b2f2860dee5577d5462f44cb508bf334ac93fff104cc05888656b5","confidence":0.9700000000000001,"provider":"typesafe","model":"jev-1.13.0","inputHash":"fe213363711e311566d6f6b29859c25f5c907566f7ac3a9966194bd25abf0513","decidedAt":"2026-11-02T00:16:52.239Z"},"provenance":{"textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observationId":"7fb985ca8aaad0a8d9c9eb10ea888499b6e818975553a0f583158b0e105afe8e","retrievedAt":"2026-11-02T00:16:48.898Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"e43fb82b-8c49-4db6-80b1-d1176cf37f0a"},"reviewer":{"model":"gpt-6-luna","runId":"4ed59bc9-3dae-435f-86cb-1f018d02cf11"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-13T18:32:14.688Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Nathan Lambert","url":"https://substack.com/@natolambert","kind":"Person"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Nathan Lambert","url":"https://substack.com/@natolambert","kind":"Person","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Nathan Lambert","status":"stated","provenance":{"basis":"article-jsonld","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","locator":"document/html[1]/body[2]/div[1]/div[1]/div[1]/script[0]@31126.author"},"assertionId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-02T00:16:48.898Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","contentSha256":"543a915fab250c00a45fe1706ddec4fba4ef71cfaae1bc5922c1ae178f07aabb","textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observedAt":"2026-11-02T00:16:48.898Z"}},{"actor":{"name":"Nathan Lambert","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Nathan Lambert","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","locator":"head/meta[name=author|citation_author]"},"assertionId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-02T00:16:48.898Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","contentSha256":"543a915fab250c00a45fe1706ddec4fba4ef71cfaae1bc5922c1ae178f07aabb","textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observedAt":"2026-11-02T00:16:48.898Z"}},{"actor":{"name":"Interconnects AI","url":"https://www.interconnects.ai/","kind":"unknown","actorId":null},"role":"publisher","scope":{"kind":"publication","locator":null},"literalCredit":"Interconnects AI","status":"stated","provenance":{"basis":"article-publisher","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","locator":"document/html[1]/body[2]/div[1]/div[1]/div[1]/script[0]@31126.publisher"},"assertionId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-02T00:16:48.898Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","contentSha256":"543a915fab250c00a45fe1706ddec4fba4ef71cfaae1bc5922c1ae178f07aabb","textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observedAt":"2026-11-02T00:16:48.898Z"}}],"participationCoverage":{"total":3,"returned":3,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":{"name":"Interconnects AI","url":"https://www.interconnects.ai/"},"sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","snapshotId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57","contentSha256":"543a915fab250c00a45fe1706ddec4fba4ef71cfaae1bc5922c1ae178f07aabb","textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observedAt":"2026-11-02T00:16:48.898Z","basis":"publisher-page-metadata","sourceLinks":21,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/637cc483c7c658cd24443b583f82bbb23bcef4862f12b8a6d27a5627890fbdf3/source"}},"canonicalUrl":"https://escapemeridian.com/readings/nathan-lambert-was-i-wrong-about-open-models-and-cyber-risks-637cc483","formats":{"html":"/readings/nathan-lambert-was-i-wrong-about-open-models-and-cyber-risks-637cc483","markdown":"/readings/nathan-lambert-was-i-wrong-about-open-models-and-cyber-risks-637cc483.md","json":"/readings/nathan-lambert-was-i-wrong-about-open-models-and-cyber-risks-637cc483.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"conditions":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-open-weights","name":"Open weights","explanation":"A model whose trained numbers are published so others can download, run and inspect it; the license and training data may still be restricted.","referenceUrl":"https://opensource.org/ai/open-weights"}],"entities":[{"id":"nathan-lambert","name":"Nathan Lambert","kind":"person","context":"Research-informed interpretation of model progress, training and limits; explicit alternative to runaway-superintelligence assumptions.","referenceUrls":["https://lexfridman.com/ai-sota-2026","https://lexfridman.com/deepseek-dylan-patel-nathan-lambert","https://www.interconnects.ai/p/i-expect-rapid-progress-but-not-towards","https://www.interconnects.ai/"],"path":"/entities/nathan-lambert","json":"/entities/nathan-lambert.json","markdown":"/entities/nathan-lambert.md"},{"id":"claude","name":"Claude","kind":"model","context":"Claude is Anthropic’s family of AI models and assistants for tasks such as writing, analysis and coding.","referenceUrls":["https://claude.com/product/overview","https://www.anthropic.com/news","https://www.anthropic.com/research/team/economics"],"path":"/entities/claude","json":"/entities/claude.json","markdown":"/entities/claude.md"},{"id":"time","name":"TIME","kind":"organization","context":"TIME is a news magazine publishing reporting on world affairs, business, technology and the workers behind digital services.","referenceUrls":["https://time.com/"],"path":"/entities/time","json":"/entities/time.json","markdown":"/entities/time.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"637cc483c7c658cd24443b583f82bbb23bcef4862f12b8a6d27a5627890fbdf3","revision":"f3d92ef6-f4c5-4202-8b41-ca2fb8aaf4c9","revisionKind":"publication-id","title":"Nathan Lambert: Was I wrong about open models & cyber risks?","url":"https://escapemeridian.com/readings/nathan-lambert-was-i-wrong-about-open-models-and-cyber-risks-637cc483"},"source":{"type":"source","id":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","revision":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","revisionKind":"sha256-source-text","title":"Was I wrong about open models & cyber risks?","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"637cc483c7c658cd24443b583f82bbb23bcef4862f12b8a6d27a5627890fbdf3","title":"Nathan Lambert: Was I wrong about open models & cyber risks?","argument":"Nathan Lambert revisits his view that an open-weight release of Claude Mythos would have increased cybersecurity incidents but not caused a step change in risk. He says recent vulnerability disclosures make him nervous about calling that outcome “fine”: companies face an expensive, difficult shift in how they work with software, though he thinks people can patch immediate problems. Lambert argues that finding a vulnerability is only one step toward harm; attackers also need to exploit it, and their resources and business processes shape what they do. He suspects most vulnerabilities are being found by closed models, but emphasizes that his evidence is weak and that recent hacks involved closed models more than open models. For him, the broader issue is AI capabilities and diffusion across a cyber ecosystem already seeing rising exploits and damage—not open versus closed models alone. He leaves open whether open models are being used in near-term attacks and whether attackers will use them to cause mass harm to public institutions.","topicIds":["institutions-and-trust","intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"Lambert says he is not a cyber expert and has “very high error bars” on his prediction about which models are finding vulnerabilities. The article does not establish whether open models are being used in near-term attacks or whether an attacker will use them to cause mass harm to public institutions. The article refers to a plot of cyber exploits and damage over time but does not analyze the plot’s scale or causes.","speaker":{"name":"Nathan Lambert","roleAtSource":"Article author"},"source":{"title":"Was I wrong about open models & cyber risks?","publisher":"Interconnects AI","format":"Article","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","publishedAt":"2026-10-30T17:36:56+00:00","dateBasis":"Date stated by the publisher."},"evidence":[{"text":"Lambert argues that an open-weight release of Claude Mythos would likely have increased cybersecurity incidents without creating a step change in risk.","excerpt":"If Claude Mythos was accidentally released as open-weight, it seems like the world would have been more or less fine. Yes, there would be a clear increase in cybersecurity incidents","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert qualifies his earlier use of “fine”: he says the transition will be expensive and difficult, and that the word undersells the turbulence for people who did not expect it.","excerpt":"I’m not sure fine is the right word to describe what is inevitably coming – a forced industry update to a new way of working with software, which will clearly be expensive and accompanied by some hard work.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert says finding a vulnerability alone does not complete the process needed to cause harm; the Firefox example also required an attacker to plant a website targeting the exploit.","excerpt":"Here, the exploit is in Firefox, and a would-be hacker needs to plant a website that is looking for this exploit. This is doable, and could have serious consequences, but just finding the exploit is only one step in a multi-stage process.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert suspects closed models are finding most vulnerabilities, but says his confidence is limited and that recent hacks involved closed models more than open models.","excerpt":"Where I sit, I expect most of these vulnerabilities are being found by closed models, but I have very high error bars on this prediction.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert frames the broader issue as AI capabilities and diffusion across cybersecurity, rather than open versus closed models alone.","excerpt":"All of this I think is way more about AI’s capabilities and diffusion generally than anything about open vs. closed models.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"},{"text":"Lambert says there is little evidence showing that open models are to blame for recent cyber incidents.","excerpt":"When talking to people who are close to the AI community, especially AI safety, I find a lot of effort going into figuring out if open models are to blame, which we still have extremely low evidence for.","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","checkedAt":"2026-11-02T00:16:48.898Z","items":[{"type":"image","url":"https://substackcdn.com/image/fetch/$s_!NQ70!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Ff51bb5d0-4390-4676-af4a-6bc8199412d5_2006x1362.png","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","attribution":"Interconnects AI","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-11-02T00:16:49.265Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"What evidence will show whether open models are materially contributing to cyberattacks, rather than broader AI diffusion and existing ecosystem trends?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Nathan Lambert: Was I wrong about open models & cyber risks?","summary":"Nathan Lambert revisits his view that an open-weight release of Claude Mythos would have increased cybersecurity incidents but not caused a step change in risk. He says recent vulnerability disclosures make him nervous about calling that outcome “fine”: companies face an expensive, difficult shift in how they work with software, though he thinks people can patch immediate problems. Lambert argues that finding a vulnerability is only one step toward harm; attackers also need to exploit it, and their resources and business processes shape what they do. He suspects most vulnerabilities are being found by closed models, but emphasizes that his evidence is weak and that recent hacks involved closed models more than open models. For him, the broader issue is AI capabilities and diffusion across a cyber ecosystem already seeing rising exploits and damage—not open versus closed models alone. He leaves open whether open models are being used in near-term attacks and whether attackers will use them to cause mass harm to public institutions.","question":"What evidence will show whether open models are materially contributing to cyberattacks, rather than broader AI diffusion and existing ecosystem trends?","claims":[{"text":"Lambert argues that an open-weight release of Claude Mythos would likely have increased cybersecurity incidents without creating a step change in risk.","excerpt":"If Claude Mythos was accidentally released as open-weight, it seems like the world would have been more or less fine. Yes, there would be a clear increase in cybersecurity incidents","support":"source-stated"},{"text":"Lambert qualifies his earlier use of “fine”: he says the transition will be expensive and difficult, and that the word undersells the turbulence for people who did not expect it.","excerpt":"I’m not sure fine is the right word to describe what is inevitably coming – a forced industry update to a new way of working with software, which will clearly be expensive and accompanied by some hard work.","support":"source-stated"},{"text":"Lambert says finding a vulnerability alone does not complete the process needed to cause harm; the Firefox example also required an attacker to plant a website targeting the exploit.","excerpt":"Here, the exploit is in Firefox, and a would-be hacker needs to plant a website that is looking for this exploit. This is doable, and could have serious consequences, but just finding the exploit is only one step in a multi-stage process.","support":"source-stated"},{"text":"Lambert suspects closed models are finding most vulnerabilities, but says his confidence is limited and that recent hacks involved closed models more than open models.","excerpt":"Where I sit, I expect most of these vulnerabilities are being found by closed models, but I have very high error bars on this prediction.","support":"source-stated"},{"text":"Lambert frames the broader issue as AI capabilities and diffusion across cybersecurity, rather than open versus closed models alone.","excerpt":"All of this I think is way more about AI’s capabilities and diffusion generally than anything about open vs. closed models.","support":"source-stated"},{"text":"Lambert says there is little evidence showing that open models are to blame for recent cyber incidents.","excerpt":"When talking to people who are close to the AI community, especially AI safety, I find a lot of effort going into figuring out if open models are to blame, which we still have extremely low evidence for.","support":"source-stated"}],"limitations":["Lambert says he is not a cyber expert and has “very high error bars” on his prediction about which models are finding vulnerabilities.","The article does not establish whether open models are being used in near-term attacks or whether an attacker will use them to cause mass harm to public institutions.","The article refers to a plot of cyber exploits and damage over time but does not analyze the plot’s scale or causes."],"mediaId":"d4d35b3da5b2f2860dee5577d5462f44cb508bf334ac93fff104cc05888656b5","correctionReason":null,"id":"637cc483c7c658cd24443b583f82bbb23bcef4862f12b8a6d27a5627890fbdf3","publicationId":"f3d92ef6-f4c5-4202-8b41-ca2fb8aaf4c9","version":1,"sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","sourceTitle":"Was I wrong about open models & cyber risks?","publisher":"Nathan Lambert","publishedAt":"2026-10-30T17:36:56+00:00","originalPublished":{"value":"2026-10-30T17:36:56+00:00","precision":"instant","basis":"publisher_page"},"firstObservedAt":"2026-10-30T17:40:27.605Z","createdAt":"2026-11-13T18:32:14.688Z","historical":true,"entityIds":["nathan-lambert"],"topicIds":["institutions-and-trust","intelligence-and-discovery"],"media":[{"id":"d4d35b3da5b2f2860dee5577d5462f44cb508bf334ac93fff104cc05888656b5","kind":"article","url":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-02T00:16:49.265Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."},{"id":"e1bb74cedd285a4084deb82f2edcc43225ca706b1891a4f4380d6dd97393196f","kind":"image","url":"https://substackcdn.com/image/fetch/$s_!NQ70!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Ff51bb5d0-4390-4676-af4a-6bc8199412d5_2006x1362.png","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","label":"View source image","provenance":"publisher_page","verification":{"status":"verified","checkedAt":"2026-11-02T00:16:49.265Z","method":"publisher_association_and_head","contentType":"image/jpeg","cacheUntil":1793578909265},"recommendationReason":"Observed on the acquired publisher source; availability checked."}],"sourceMedia":{"status":"found","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","checkedAt":"2026-11-02T00:16:48.898Z","items":[{"type":"image","url":"https://substackcdn.com/image/fetch/$s_!NQ70!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Ff51bb5d0-4390-4676-af4a-6bc8199412d5_2006x1362.png","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","attribution":"Interconnects AI","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-11-02T00:16:49.265Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"editorialDecision":{"outcome":"accept","reasonCodes":["useful_perspective"],"rubricVersion":"stream-admission-v5","mediaId":"d4d35b3da5b2f2860dee5577d5462f44cb508bf334ac93fff104cc05888656b5","confidence":0.9700000000000001,"provider":"typesafe","model":"jev-1.13.0","inputHash":"fe213363711e311566d6f6b29859c25f5c907566f7ac3a9966194bd25abf0513","decidedAt":"2026-11-02T00:16:52.239Z"},"provenance":{"textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observationId":"7fb985ca8aaad0a8d9c9eb10ea888499b6e818975553a0f583158b0e105afe8e","retrievedAt":"2026-11-02T00:16:48.898Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"e43fb82b-8c49-4db6-80b1-d1176cf37f0a"},"reviewer":{"model":"gpt-6-luna","runId":"4ed59bc9-3dae-435f-86cb-1f018d02cf11"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-13T18:32:14.688Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Nathan Lambert","url":"https://substack.com/@natolambert","kind":"Person"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Nathan Lambert","url":"https://substack.com/@natolambert","kind":"Person","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Nathan Lambert","status":"stated","provenance":{"basis":"article-jsonld","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","locator":"document/html[1]/body[2]/div[1]/div[1]/div[1]/script[0]@31126.author"},"assertionId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-02T00:16:48.898Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","contentSha256":"543a915fab250c00a45fe1706ddec4fba4ef71cfaae1bc5922c1ae178f07aabb","textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observedAt":"2026-11-02T00:16:48.898Z"}},{"actor":{"name":"Nathan Lambert","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Nathan Lambert","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","locator":"head/meta[name=author|citation_author]"},"assertionId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-02T00:16:48.898Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","contentSha256":"543a915fab250c00a45fe1706ddec4fba4ef71cfaae1bc5922c1ae178f07aabb","textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observedAt":"2026-11-02T00:16:48.898Z"}},{"actor":{"name":"Interconnects AI","url":"https://www.interconnects.ai/","kind":"unknown","actorId":null},"role":"publisher","scope":{"kind":"publication","locator":null},"literalCredit":"Interconnects AI","status":"stated","provenance":{"basis":"article-publisher","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","locator":"document/html[1]/body[2]/div[1]/div[1]/div[1]/script[0]@31126.publisher"},"assertionId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-02T00:16:48.898Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57","sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","contentSha256":"543a915fab250c00a45fe1706ddec4fba4ef71cfaae1bc5922c1ae178f07aabb","textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observedAt":"2026-11-02T00:16:48.898Z"}}],"participationCoverage":{"total":3,"returned":3,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":{"name":"Interconnects AI","url":"https://www.interconnects.ai/"},"sourceUrl":"https://www.interconnects.ai/p/was-i-wrong-about-open-models-and","snapshotId":"434705ce8a165728293fbb52e00e9ed80e84031bed4bac8178fb6890aff21c57","contentSha256":"543a915fab250c00a45fe1706ddec4fba4ef71cfaae1bc5922c1ae178f07aabb","textHash":"33557ec546518a34baeef00edb24b91ab7f0e9d128fbe372652b9ed38dabdd1c","observedAt":"2026-11-02T00:16:48.898Z","basis":"publisher-page-metadata","sourceLinks":21,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/637cc483c7c658cd24443b583f82bbb23bcef4862f12b8a6d27a5627890fbdf3/source"}}}],"audits":[{"publicationId":"f3d92ef6-f4c5-4202-8b41-ca2fb8aaf4c9","verdict":"uncertain","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading correctly attributes the essay and its arguments to Nathan Lambert. Quoted views from others, such as the threat-actor tweet and the Saxe/Hughes ecosystem perspective, are not presented as Lambert's original claims.","excerpt":"Was I wrong about open models & cyber risks?\nNathan Lambert"},{"dimension":"summary","status":"uncertain","explanation":"Two gaps. First, the summary says Lambert is nervous about calling the outcome fine, but it drops his answer to the title question: he largely still stands by the view. It also drops his claim that fear-mongers made a falsifiable prediction that is set up to be wrong. Smallest repair: add that he largely stands by the earlier take while conceding nervousness and giving more credit to reasonable safety voices. Second, central terms are unexplained for lay readers: open-weight, closed models, and what Claude Mythos and GLM-5.3 are. These need brief explanations or tooltips.","excerpt":"I largely still stand by my above writing a few weeks ago, but I’m nervous about it. I’m not a cyber expert"},{"dimension":"date","status":"pass","explanation":"The originalPublished value of 2026-10-30 matches the article's byline date, and the feed timestamp is the same. No earlier first publication is indicated.","excerpt":"Nathan Lambert\nOct 30, 2026"},{"dimension":"support","status":"pass","explanation":"Each claim's excerpt supports it, including the hedged step-change claim, the qualification of the word fine, the multi-stage Firefox exploit, the high error bars, the framing around AI capability and diffusion, and the low evidence of open-model blame. Lambert does state that closed models played a larger part in recent hacks. The limitations and the question follow from the evidence without inventing stakes.","excerpt":"Closed models have played a very heavy part in the recent hacks, at least more than open models have."},{"dimension":"media","status":"pass","explanation":"The selected media is the verified direct link to the original Interconnects article, which is the most direct way to reach the source.","excerpt":null}],"createdAt":"2026-11-13T18:32:14.688Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}