Anthropic's Mythos AI Uncovers Critical macOS Security Vulnerabilities

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Security researchers at Calif used Anthropic's Mythos AI model to discover two previously unknown vulnerabilities in Apple's macOS, enabling a privilege escalation exploit that could bypass memory integrity enforcement and allow unauthorized system access. Apple is reviewing the findings and preparing patches to address the risk.[AI generated]

Why's our monitor labelling this an incident or hazard?

The AI system (Anthropic Mythos) was used in the development of a working exploit that bypasses Apple's M5 security protections, directly leading to a security breach capability. This constitutes a direct link between AI use and a harm scenario involving disruption of critical infrastructure (Apple's hardware security). Although the exploit was responsibly disclosed to Apple, the fact that the AI system enabled the rapid creation of such a powerful exploit represents an AI Incident due to the realized harm potential and actual compromise of security protections. The event is not merely a potential hazard or complementary information, but a concrete case where AI was instrumental in creating a harmful exploit.[AI generated]
AI principles
SafetyRobustness & digital security

Industries
Digital securityIT infrastructure and hosting

Affected stakeholders
ConsumersBusiness

Harm types
Economic/PropertyHuman or fundamental rights

Business function:
ICT management and information security

AI system task:
Reasoning with knowledge structures/planning


Articles about this incident or hazard