AI is having its "Ford T" moment as Zero Day assembly lines appear | Tech Radar

Overview

News, deals, reviews, guides and more on the newest computing gadgets

Start exploring exclusive deals, expert advice and more

Details

Unlock and manage exclusive Techradar member rewards.

Unlock instant access to exclusive member features.

Get full access to premium articles, exclusive features and a growing list of member rewards.

AI is having its "Ford T" moment as Zero Day assembly lines appear

What are the security implications of Anthropic's Claude Mythos?

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Coming out of the major security conferences this year, the anxiety around AI was palpable. However, if you listen closely, much of the industry is still stuck viewing AI as a sophisticated phishing generator or a helpful coding assistant.

Having spent my background in vulnerability research and exploit development manually hunting for memory corruption and writing exploits, looking at models like Anthropic's Claude Mythos, and now Open AI's GPT-5.4-Cyber, hits entirely differently.

Mythos isn’t just an assistant. It is industrializing vulnerability discovery and exploit development at a scale we have never seen. To understand why this is a fundamentally terrifying shift in the threat landscape, you have to understand how exploits used to be built and how AI is completely rewriting those rules.

Mozilla’s Mythos AI test could change cybersecurity forever

AI tools have made vulnerability exploitation faster and easier

The art of the exploit: A hostage negotiation with the CPU

Historically, finding a vulnerability, crash, or logic flaw was only about 10% of the battle. Turning that crash into reliable code execution is an artisanal, intensely manual process. Modern systems are hostile environments, layered with mitigations like ASLR (Address Space Layout Randomization) and DEP (Data Execution Prevention).

To bypass these, exploit developers rely on incredibly complex, fragile techniques:

ROP (Return-Oriented Programming) Chaining: When you can’t inject your own code, you have to hijack the execution flow and stitch together tiny, existing fragments of executable memory (called "gadgets") to do your bidding. It requires an intimate understanding of the target architecture and immense trial and error just to get a foothold.

JIT Heap Sprays: Exploiting a modern browser means manipulating its Just-In-Time compiler. You have to groom the memory layout perfectly, trick the engine into allocating your payload exactly where you want it, and desperately hope the garbage collector doesn’t trigger and crash the entire process before your exploit fires.

This work requires intuition, deep architectural familiarity, and a massive cognitive load. Humans get fatigued. We lose track of the state machine. We miss edge cases. Building a reliable exploit chain has always been a bottlenecked process, reserved for highly specialized researchers or well-funded nation-state teams.

The Mythos paradigm: abstracting art into compute

For years, we tried to automate this with fuzzers throwing millions of malformed inputs at a binary hoping it would crash. But fuzzers are blind; they fail entirely at navigating subtle, multi-step logic bugs.

Mythos succeeds where fuzzers fail because it isn't guessing; it is reasoning.

When Mythos approaches a complex problem like a JIT spray, it holds the entire execution flow in its context window. It doesn't rely on a "gut feeling." It reads the code, generates a hypothesis, writes the exploit, executes it in an isolated sandbox, analyzes the crash dump, and iterates.

It does this relentlessly, at compute speed, adjusting memory layouts programmatically until it hits the exact deterministic sweet spot.

Project Glasswing wants to use AI to prevent AI cyberattacks

Mythos and friends could be a 'net positive' for UK cyber security defenses but only if they're secured, says top cyber official

Even more alarming is its ability to chain vulnerabilities. For a human, chaining a memory leak to a buffer overflow to a privilege escalation is exceptionally difficult because the environment state changes after every step.

Mythos natively handles this state-space explosion, seamlessly recalculating the environment and moving forward. It turns a fragile, human puzzle into a parallelized compute problem.

For the last decade, the fundamental mantra of cybersecurity has been “back to basics.” We were told that if we just practiced good security hygiene, patching high and medium CVEs, reducing our known vulnerability count to zero, we could keep the blast radius contained.

But this hygiene playbook assumes that the list of vulnerabilities is bounded and knowable. Glasswing obliterates that assumption.

The zero-day vulnerabilities Mythos has identified aren’t trivial edge cases; they include critical, difficult-to-detect flaws in every major operating system and web browser. This isn't a vulnerability backlog problem. This is a civilizational software debt problem being exposed overnight.

Telling CISOs to simply "patch faster" right now is essentially telling them to empty a flooding basement with a bucket, right after the burst pipe's diameter increased by orders of magnitude.

The nightmare scenario: democratizing the zero-day

The existential dread setting in across the vulnerability research community is justified. What happens if a model with these capabilities is open-sourced or leaked?

The barrier to entry for devastating, multi-stage attacks would hit the floor. An attacker wouldn't need to spend months reverse-engineering a proprietary Saa S platform or a legacy enterprise system; they would simply point the model at it.

We would enter the era of the "Zero-Day Factory," where novel attack methods are generated continuously. The time-to-exploit window—the time defenders have between a vulnerability being introduced and it being weaponized—would collapse to near-zero.

This asymmetric reality is exactly why Anthropic locked Mythos behind Project Glasswing. By restricting it to defensive launch partners, it appears the goal is to give the good guys a head start.

For those of us tasked with designing architectures, communicating risk to clients, or defending IT infrastructure, the threat model has permanently shifted.

With Anthropic's Claude Mythos and now Open AI's GPT-5.4-Cyber, we are officially at a tipping point in model sophistication where these innovations will cause real problems for the cybersecurity industry.

We can no longer rely on the assumption that complex exploit chains are too expensive or difficult for the average threat actor or perhaps even script kiddie to build.

The artisanal era of exploitation is ending, and the industrialized era has already begun.

We've featured the best endpoint protection software.

This article was produced as part of Tech Radar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of Tech Radar Pro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

You must confirm your public display name before commenting

1'Epic' Rivals season 2 episode 1 Eastenders cameo is my favorite Easter egg in new Hulu and Disney+ episodes — and according to creators, it's the 'perfect homage to the 1980s'

25+ budget running headphones for beginners: affordable earbuds to help you up your pace this summer

3‘This must be engagement farming’: Nothing CEO pokes fun at Sony for 'awful' Xperia 1 VIII social post showing its AI Camera Assistant tool making photos look worse

4 Two new Xbox controllers have leaked online: an Xbox Elite Series 3 with a removable battery and an odd-looking cloud controller

5 Nord Protect rebrands as Coveron — here's what it means for you

Tech Radar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

Key Takeaways

News, deals, reviews, guides and more on the newest computing gadgets
Start exploring exclusive deals, expert advice and more
Unlock and manage exclusive Techradar member rewards
Unlock instant access to exclusive member features
Get full access to premium articles, exclusive features and a growing list of member rewards