The United States Cybersecurity and Infrastructure Security Agency (CISA) is now using artificial intelligence developer Anthropic’s Mythos platform to “audit government software,” a seeming rebuke of the Pentagon, which classified the company as a “national security risk” in February and attempted to institute controls on its use by government agencies. CISA is one of around 100 organizations approved to use Anthropic’s Mythos model, which is far better than human penetration testers at detecting and exploiting software bugs. CISA’s Attack Surface Evaluation team has been employing the model to audit source code and identify flaws that could be exploited by cybercriminals or nation-state actors, Reuters first reported last week. The initiative is apparently part of a pilot program to evaluate whether AI can accelerate software security reviews across government systems. According to the Reuters report, Mythos successfully identified multiple vulnerabilities during testing, although specifics on the number of vulnerabilities, severity, or affected software were not disclosed. The Claude Mythos platform is an extremely advanced large language model that hasn’t been released to the general public due to concerns that its software engineering capabilities could be too dangerous. The software has already been used to identify thousands of zero-day vulnerabilities in every major operating system and web browser, including decades-old bugs.