New Claude Mythos becomes the first AI model to clear all cyberattack simulations from Britain's AI safety agency

The buried detail is the AISI's second rapid revision to its doubling timeline, from eight months down to 4.7 months, meaning the agency's own safety benchmarks are being outpaced faster than the agency can recalibrate them. That's not a capability story, it's a governance infrastructure story.

This lands directly on top of our May 1 coverage noting that GPT-5.5 was already live in ChatGPT while Claude Mythos remained restricted to a closed cohort. That asymmetry matters more now: both models have cleared every AISI simulation, but only one is in broad public deployment. The Claude Security launch covered the same week shows Anthropic's answer to that gap is controlled vertical release rather than open access, a bet that domain-gated deployment contains misuse risk. What this milestone does is validate the underlying capability claim Anthropic made when it launched that product. The MIT Technology Review piece from the same period argued security architecture needs to be designed around AI from inception, and the AISI's scrambling timeline revisions are a live example of what happens when evaluation frameworks are bolted on after the fact.

Watch whether the AISI publishes a revised evaluation methodology within 90 days. If it doesn't, the benchmark effectively becomes a lagging indicator rather than a safety gate, which changes how much weight policymakers can place on it.