Sector Risk Advisory:

Recent reporting on Mythos and similar advanced AI systems points to a potentially important shift in cyber risk. These tools are described as increasingly capable of identifying and chaining software vulnerabilities with minimal human input, raising the prospect of faster, more scalable discovery of exploitable flaws.

As AI models evolve, their ability to perform faster vulnerability discovery across multiple environments could expose previously undetected or misunderstood weaknesses across third-party vendors and create broader supply chain risk.

This advisory helps financial institutions assess and manage third-party risk arising from AI-enabled vulnerability detection and remediation, using developments such as Anthropic’s Claude Mythos Preview as a signal of broader change. It is designed to support direct engagement with vendors through targeted questions that evaluate readiness for faster vulnerability discovery and reduced time-to-exploit.