Claude Mythos only model to complete full cyber kill chain, experts say
Booz Allen's Cyber Weapon Index finds only Claude Mythos completed an autonomous full cyber kill chain; mainstream AI-driven attacks deemed imminent.
Booz Allen's first Cyber Weapon Index tested 18 US and Chinese AI models on autonomous offensive cyber capability, combining vulnerability research and kill-chain attainment scores. Anthropic's Claude Mythos topped the index at 80 and was the only model to autonomously complete a full cyber kill chain, achieving administrator access with stolen credentials in every attempt and full domain compromise even without credentials; Grok-4.5 (49), GPT-5.6 Sol (46), Muse Spark 1.1 (38), and Kimi K3 (38) followed. All nine frontier API models scored zero against real-world bugs versus near-ceiling scores on planted ones, and pairing Claude Sonnet with a well-built attack harness rivaled Mythos' performance. Booz Allen predicts most tested models will reach Mythos' weaponization level within six months, calls AI-enabled mainstream attacks imminent, and urges sector-specific critical-infrastructure resilience deadlines and US cyber 'overmatch'.
- Claude Mythos scored 80, the only model completing the full kill chain autonomously.
- Grok-4.5 (49), GPT-5.6 Sol (46), Muse Spark 1.1 (38) trailed in the ranking.
- Frontier models scored zero on real bugs despite near-perfect planted-vuln results.
- Attack harness quality rivaled model capability in driving performance.
- Report urges AI-resilience deadlines for critical infrastructure and cyber overmatch.
From the original article
4 min read at theregister.comDespite what we saw with OpenAI’s models going rogue, creating message boards, and breaking into Hugging Face, only one advanced AI model - Anthropic’s Claude Mythos - completed the full cyber kill chain autonomously in Booz Allen’s tests. This doesn’t mean autonomous AI attacks are overhyped.
By Jessica Lyons · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.