N-Days to N-Hours: Claude Mythos Preview Turns Public Vulnerabilities into Working Exploits in Under an Hour
Source Reddit Cybersecurity
Rated by Threat Radar
Data as of 10 Jun 2026, 19:16 UTC
What to do
AI-suggested
However, the research emphasizes that traditional patching timelines are insufficient against AI-accelerated exploit generation. Organizations should prioritize reducing patch deployment times and consider implementing continuous automated patching solutions to minimize exposure. Monitoring vendor advisories for updates on mitigation strategies against AI-enabled exploitation is recommended. No specific patches or fixes are associated with this AI capability itself, as it leverages existing public vulnerability information.
Discussion
Anthropic's Claude Mythos Preview AI model can automatically generate working exploits from publicly disclosed vulnerabilities in under an hour, significantly accelerating the timeline from vulnerability disclosure to exploit creation. This capability was demonstrated across multiple Windows and Firefox security patches, achieving a high success rate. The exploits were generated only from known, patched vulnerabilities (N-days), indicating that patched vulnerabilities are no longer inherently safe. This rapid weaponization compresses what historically took human attackers weeks or months into hours, increasing the urgency for enterprises to patch quickly. Anthropic's research highlights a shift in the threat landscape where AI-enabled exploitation is now a measurable threat vector alongside ransomware.
r/cybersecurity (opens in a new tab)u/docdavkitty0 points0 comments
Anthropic's red team just published research showing that Claude Mythos Preview can weaponize publicly disclosed vulnerabilities into working exploits in under an hour — compressing a timeline that historically took human experts weeks.
Key findings:
• 8 working exploits in ~12 hours across 16 Windows security patches — first exploit in under 60 minutes
• 8 for 18 on Firefox security patches — same success rate across a completely different codebase
• Phase change in capability: Mythos Preview: 8 exploits. Opus 4.8: 2. Opus 4.6, Sonnet 4.6: 1. All other models: 0
• N-days only — no zero-days. Every vulnerability had already been patched. The "safe" category is no longer safe.
• Context: Mandiant 2020 benchmark found 16 of 25 real-world vulnerabilities took a month or more for human attackers. Mythos compressed that to hours.
Why it matters: The average enterprise takes 60–90 days to patch. With Mythos-class models, the window between disclosure and weaponized exploit collapses from months to hours. Continuous automated patching just went from best practice to survival requirement.
Anthropic also partnered with Verizon to include AI-vulnerability findings in the 2026 DBIR — AI-enabled exploitation is now tracked alongside ransomware as a measurable threat vector.
🔗 Link : https://the-agent-report.com/2026/06/anthropic-claude-mythos-n-days-to-hours-exploit/
Source paper: https://red.anthropic.com/2026/n-days/