Anthropic said Mythos was too dangerous to release. Then four random guys in a Discord gained access on day one by guessing the URL...
This is pretty insane:
โ Group in a private Discord guessed the endpoint from Anthropic's naming conventions
โ They figured out the conventions from the leak in the Mercor breach three weeks ago
โ Used a contractor's legit eval credentials to walk in
โ Have been using it ever since to build simple websites
The AI that finds zero-days in every operating system on earth was defeated by address bar autocomplete... big yikes