The Mythos threat
Finding flaws is now cheap. Fixing them is not.
In April 2026 Anthropic put an AI model called Claude Mythos in the hands of a few dozen defenders because it finds and exploits software vulnerabilities better than all but the most skilled humans. By late May the count stood at more than 10,000 high or critical flaws, including one in a cryptography library running on billions of devices. The defenders have it first. Nobody is promising they will have it alone. This page is what that means for a Canadian network and what Fabric does about it.
WHAT MYTHOS IS
A machine that reads code the way the best attackers do, and never gets tired
On April 7, 2026 Anthropic announced Claude Mythos Preview and Project Glasswing. Anthropic describes the model as able to find and exploit software vulnerabilities at a level that surpasses all but the most skilled humans, and says it has found thousands of zero day flaws across every major operating system and web browser, including a 27 year old vulnerability in OpenBSD and chained Linux kernel flaws that gave full control of a machine. The model is not for sale. Twelve launch partners (among them Cisco, Palo Alto Networks, CrowdStrike, Microsoft, Google and the Linux Foundation) and about forty other organizations were given access to find and fix flaws before anyone else can use them.
By Anthropic's May 26 update the partners had identified more than 10,000 high or critical severity vulnerabilities. A scan of about 1,000 open source projects turned up 23,019 issues, 6,202 of them high or critical, and independent firms validated more than 90 percent of the sample they checked. One finding was in wolfSSL, a cryptography library used by billions of devices; the exploit the model built could have forged certificates for a fake bank or email site. Anthropic's own words on safeguards: no company, including Anthropic, has developed safeguards strong enough to prevent such models from being misused. The chief technology officer of CrowdStrike put the operational consequence plainly: the window between a vulnerability being discovered and being exploited has collapsed.
WHY AN OPERATOR SHOULD CARE
Two clocks, one network
The first clock is the one Mythos just sped up. A firewall, a VPN gateway, a router or a remote terminal unit runs the same cryptography libraries and the same classes of code the model has been tearing through, and the equipment stays in service for a decade. What took a skilled team months now takes a machine hours, and capability of this kind has never stayed on one side for long. The month's Cyber Centre advisories already read like the early pages of that story: management planes, remote access appliances and OpenSSL builds, patched after the fact.
The second clock is quantum. Traffic captured today is kept until it can be opened, and the Government of Canada has already set its dates (high priority systems migrated by the end of 2031, everything by 2035). The two clocks compound. The faster flaws are found in the software that negotiates your keys, the less you can afford to have your long lived data depend on that negotiation. Both clocks point to the same first step: you can't fix what you can't see.
HOW FABRIC MANAGES THE MYTHOS THREAT
The hardware stays. The keys change.
Fabric does not sell a patch for Mythos; nobody can. What we do is take the keys that protect your long lived data out of the software most likely to be found wanting, on the Fortinet and Ciena equipment you already run, with Arqit's platform underneath. Three moves, in order.
1. DETECT: ENCRYPTION INTELLIGENCE
Passive probes observe every encrypted flow on your IT and OT networks and record the cipher, key length, certificate and library behind each one, including the OpenSSL and wolfSSL builds inside firewalls and routers. You get an inventory an auditor will accept, ranked by what a failure would do to the service it carries, with findings pushed into the ticketing you already run. When the next Mythos class flaw lands, you know in minutes which keys it touches.
2. PROTECT: NETWORKSECURE ON FORTINET AND CIENA
Arqit's SKA-Platform generates symmetric keys at the endpoints from shared material, so the session key never travels and never depends on a public key exchange that a found flaw can unpick. Fabric delivers those keys into FortiGate tunnels through the Fortinet Fabric-Ready validated integration and into Ciena optical transport encryption on the backbone, which another operator has already run at multiple hundreds of gigabits. Rotation is a policy, not a project. If a key is ever exposed, it is replaced, not renegotiated.
3. COMPLY AND SCALE
The same inventory becomes the evidence trail ITSM.40.001, Bill C-8 programs and your insurer will ask for, kept current as vendors and firmware change. New sites and new fibre go in quantum-safe from the first splice, so the estate stops growing in the wrong direction. Fabric designs, supplies, installs and operates all of it in Canada, from Calgary, with a written scope before any work starts.
What this page does not say
It does not say Mythos has been used against anyone. Every figure above is Anthropic's own, published by Anthropic, and Fabric Networks is not affiliated with Anthropic or Project Glasswing. It does not say any product prevents a breach: an AI that finds flaws in software will keep finding them, and patching stays the first duty. What it says is narrower. The keys that protect long lived data should not depend on the software most likely to be found wanting, and an operator should know, from observation rather than a data sheet, which keys those are. That is the part Fabric does.