NSA deploys Anthropic Mythos for cyber operations despite federal ban on the AI company

Reviewed byNidhi Govil

3 Sources

Share

The National Security Agency is using Anthropic's frontier cybersecurity AI model Mythos for intelligence operations, with half a dozen Anthropic engineers embedded inside the agency. This comes despite a federal ban on Anthropic technology after the Department of Defense labeled the company a supply chain risk for refusing to allow its models for mass surveillance and autonomous weapons.

Anthropic Engineers Embedded Inside the Agency

Anthropics has deployed approximately half a dozen engineers to the National Security Agency to assist with implementing its frontier cybersecurity AI model, Mythos, according to a Financial Times report citing anonymous sources

1

. These Anthropic engineers embedded inside the agency are tasked with helping intelligence officials use Anthropic Mythos for specialized applications, though it remains unclear whether the personnel or the model are actively involved in ongoing hacking operations

2

. The NSA declined to confirm or deny the reporting when contacted, while Anthropic did not respond to requests for comment

1

.

Source: TechCrunch

Source: TechCrunch

NSA Cyber Operations and Intelligence Gathering

The National Security Agency's mandate includes collecting intelligence from wiretaps, undersea cables, corporate partnerships, and other clandestine data sources, as well as conducting offensive cyber operations against foreign adversaries

1

. Sources familiar with the arrangement suggest the cybersecurity AI model could prove useful for infiltrating networks of nations such as China or Iran, reflecting the rationale that U.S. adversaries will likely deploy similar AI-powered tools

2

. The embedded engineers are reportedly helping customize Anthropic Mythos for unique types of intelligence gathering operations and spying activities

3

.

Federal Ban on Anthropic and Supply Chain Risk Designation

The NSA's use of Anthropic Mythos occurs despite a federal ban on Anthropic technology that followed the Department of Defense designating the company as a supply chain risk in early March 2026

1

. This unprecedented action against an American company came after Anthropic refused to comply with a $200 million DOD contract that demanded the company allow usage of its models for "all lawful purposes," including mass domestic surveillance and autonomous weaponry

2

. CEO Dario Amodei defended the company's position, stating that "in a narrow set of cases, [Anthropic believes] AI can undermine, rather than defend, democratic values"

2

. Anthropic subsequently filed an ongoing lawsuit against the DOD, calling the supply chain risk designation a violation of the First Amendment

2

.

Source: Tom's Hardware

Source: Tom's Hardware

Shifting Dynamics Between Anthropic and Government

The apparent collaboration between the NSA and Anthropic raises questions about whether the Department of Defense may be reconsidering its stance or if internal divisions exist regarding the necessity of Mythos capabilities

2

. Reports indicate that Amodei and his team met with senior White House officials who subsequently encouraged banks to test Mythos as part of their cybersecurity protocols

3

. The NSA's use of the model was first reported by Axios in April, which noted the agency was using Mythos despite the federal ban

1

. Two separate courts have issued contradictory rulings on the ongoing Anthropic-DOD lawsuits, further complicating the legal landscape

2

.

Source: CXOToday

Source: CXOToday

Mythos Distribution Through Glasswing Project

Anthropics has expanded access to Mythos through its Glasswing project, initially distributing the model to a handful of U.S. organizations before expanding to 150 organizations across 15 countries

2

. The company had to limit access to the model, citing concerns that its advanced cybersecurity capabilities could be exploited to discover security flaws and execute hacks

1

. Reports suggest the NSA was part of the smaller initial group that received access to the model, with the list growing from 12 names to 28 and now exceeding a hundred organizations, including India's CERT-in

3

. The development comes as governments worldwide scramble to access frontier AI models for cyber operations, and as the security landscape accelerates vulnerability exploitation timelines toward zero-day exploits

2

.

Today's Top Stories