Anthropic and OpenAI Rewrite the Rules of Cybersecurity： Autonomous AI Hacker Ca

Mon, 01 Jan 0001 00:00:00 +0000

Introduction: When AI Is No Longer Just an Assistant, but a Decision-Maker

The tone of conversation in the cybersecurity industry has been completely rewritten within a week. Previously, we discussed “how AI assists analysts” and “how machine learning filters logs.” But when Anthropic’s Claude Mythos can, upon receiving a simple instruction, independently complete the entire process from code review, hypothesis generation, environment testing to producing a complete attack program—and increase vulnerability exploitation success rates from single digits to 181 instances in standardized tests—we are facing an entirely new species.

This is not a linear improvement in efficiency, but a dimensional leap in capability. More crucially, OpenAI almost simultaneously launched GPT-5.4-Cyber, yet chose a seemingly opposite path: making it available to thousands of verified defenders through its “Trusted Access Program.” On one side is Anthropic, which created a super-autonomous hacker but chose to lock it in a safe; on the other is OpenAI, eager to place powerful tools in the hands of the “good guys.” This divergence is far more worthy of deep investigation than technical specifications. It concerns the distribution of power in the AI era, business ethics, and our redefinition of the term “control.”

GPT-5.4-Cyber on SoloSoft

Anthropic and OpenAI Rewrite the Rules of Cybersecurity： Autonomous AI Hacker Ca

Introduction: When AI Is No Longer Just an Assistant, but a Decision-Maker