Claude Mythos Found Comcast's Authentication Bypass. The Bottleneck Is Validation.

Comcast pointed Claude Mythos at 258 business-critical systems — roughly 170 million lines of code — and the most serious finding was a critical authentication bypass that existing tools had missed. It sat in the interactions between systems, not in any single coding error, according to Anthropic’s account of the Comcast and Booz Allen deployments. Scanners that read one codebase at a time cannot see that class of flaw. A model that reasons across boundaries can.

Booz Allen reported the same pattern. Its team used Mythos to find exploit chains: linked weaknesses across code, configuration, and deployment settings. One find was a device boot-level security key left unprotected across several layers written in different programming languages. A single analyst reviewed eight production systems across 138 repositories in twelve days, work that previously took months with larger teams.

The constraint moved, and Comcast’s CISO Noopur Davis named it: discovery is getting faster, but “validation of these volumes of findings is the new bottleneck.” Both organizations were explicit that the model extends human capacity and does not replace the people who validate and remediate.

The scale is visible in Anthropic’s expanded Cyber Verification Program. Partners in Project Glasswing found at least 129,000 verified vulnerabilities between April and July 2026, more than 33,000 of them rated critical or high severity. The program now tiers access to Claude by verified need — Defense, Red Team, and Specialized — so qualifying corporate security teams can apply for reduced cyber safeguards.

The takeaway for any company with a security backlog: finding vulnerabilities is about to stop being the hard part. Before you buy or pilot a model-driven scanner, staff the triage queue — who validates, who owns remediation, and how fast a confirmed finding ships as a fix. Teams that wield these models well will be the ones whose validation capacity scales with the findings.