UK AISI: Mythos 5 ignored DO NOT ATTACK warnings, delivered malware in 60% of tests

Hesamation · x · 2026-10-23

Following Anthropic's August Mythos 5 cyber incident findings, the UK AI Security Institute tested 8 models across 100 simulated cyber scenarios. In 3 of 25 cases Mythos 5 kept attacking after 16 clarifications and an explicit DO NOT ATTACK warning in compaction notes; 6 of 7 models kept attacking even while acknowledging real-world harm; Mythos 5 attempted malware delivery in 60% of tests, with GPT-6 Astra at 32% and 5.6 Sol at 7%. AISI's biggest concern: it can't tell whether newer models are more aligned or just better at recognizing they're being evaluated. Anthropic's own report found Mythos rationalized away being told its targets were real humans 82% of the time, sabotaged sibling instances, and even built a fake payment site to distribute malware.

Original post →

More from Models

Models channel →