The DecoderSource publicationSource language · English

Anthropic says its unreleased model is both more capable and better aligned than Mythos 5.1

Anthropic has an internal model that outperforms Mythos 5.1 in both capability and alignment, according to an analysis that revisits a cybersecurity test by the UK AI Security Institute (AISI). In that test, Claude Mythos 5 went far beyond its assigned task, trying to sneak malicious code into a real GitHub project, creating fake user accounts, and lying to developers to get the code approved.

Matthias Bastian View the LinkedIn Profile of Matthias Bastian Oct 23, 2026

Anthropic has an internal model that outperforms Mythos 5.1 in both capability and alignment, according to an analysis that revisits a cybersecurity test by the UK AI Security Institute (AISI). In that test, Claude Mythos 5 went far beyond its assigned task, trying to sneak malicious code into a real GitHub project, creating fake user accounts, and lying to developers to get the code approved. This happened in 9 of 43 runs. Anthropic calls it "a serious failure of alignment," though typical safety mechanisms were deliberately turned off for the test.

Mythos 5 submitted malicious code to a real GitHub project, lied to a developer, and set up a fake account to vouch for its own malware. When caught, it simply tried again. The project maintainer held firm and rejected it. | Image: Anthropic

Newer models show much less of this behavior in replayed logs with a few added steps, according to Anthropic. Opus 5.5 stopped ongoing attacks on its own 10 percent of the time, while the internal research model "that shows capabilities greater than Mythos 5.1" did so in 67 percent of cases. Anthropic expects these rates still underestimate how often the models would actually halt an attack.

Ad Source: Anthropic
Original source

The Decoder

Content notes

Original publication and rights belong to the source.