Author: gem

We love when vRon takes a close look at BIML’s press coverage. This is a great episode.

Look, either OpenAI should be charged with hacking or its autonomous thing escaped the lab completely. Which is it?

As usual, Lemos does a great job covering a complex topic. In this case, nobody is covering what we thing is pretty apparent…the OpenAI swarm is out of its jar. Read the article here.

Dennis Fischer and BIML’s Gary McGraw explore the evolving challenges of AI security, focusing on the implications of autonomous agentic models. They examine the limitations of current measurement benchmarks, the risks associated with sandbox escapes, and the necessity of shifting toward robust security engineering within complex machine learning ecosystems.

If you wonder what BIML is working on next, watch this podcast and find out.

McGraw was honored to host an illustrious panel of academics and security researchers (of the science flavor) discussing the future of machine learning security and privacy. Of course we didn’t stick to the script.

Who wins when the FUD is turned to 11 and the irony is thick enough to cut with a knife? BIML spoke to German TV about that. Have a watch.

To prep for the interview by gathering our thoughts, we wrote this.

Anthropic, June 12, 2026

“The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees. The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance. Access to all other Anthropic models will not be affected.“

By now you probably know that BIML believes the “Mythos is too dangerous to release” thing was mostly great marketing spin. We made our position on this clear way back in April and even said so to the NY Times. Sure, advanced LLM models can be helpful if you want to break software, but they can be just as helpful fixing software security problems. Bottom line for BIML based on lots of conversations with hands on hackers and software security types: we don’t find Mythos much more dangerous than any other advanced LLM models. And just so you know, we are used to this “tools go both ways” thing in software security.

Further, we don’t think anyone has a clue about how to measure or compare the security of LLMs. That’s what our latest big paper, No Security Meter for AI, is all about. Give it a read. What makes Mythos more dangerous than, say Opus 4.8? Nobody knows how to measure that. Really. Not even Anthropic.

So what about this export control situation? According to David Sacks, a Fable 5 jailbreak (intentionally tickled by trusted advisor “red teaming”) caused the government to step in and declare certain models munitions. The logic seems to go, if you can jailbreak Fable 5, you get Mythos-level “cyber cyber.” Anthropic disagreed that the jailbreak is serious, the Administration put on the export control restriction, and here we are.

Huge irony number one is that Anthopic was the one who started all this with the “too dangerous to release” spin. I guess the US government people who made this decision have not kept up with their BIML reading! Alas. Anthropic is now lying in the bed they made.

Though this sort of thing may come as a shock to non-security people, lots of us old school security people remember the crypto wars (before “crypto” came to mean high bullshit “currency”) and what happened when the US Government banned the export of certain kinds of cryptographic algorithms. Bottom line, that didn’t work at all and it made the US Government look pretty silly for trying to outlaw certain kinds of math. Deja vu all over again. Outlawing software?? What?

Huge irony number two is that the US Government may be accidentally crippling US AI by stepping in with a barely-thought-through export control restrictions. Which foreign governments and companies want to be subject to the whims of the current administration when it comes to AI? Better to use Chinese models or open weight models. (You rememebr what happened when the US government tried to outlaw math, right? It greatly helped foreign companies take market share.) Starseer’s guest blog post, Your Frontier Provider Is Quietly Limiting Your Capability & Research, pursues this angle but from a pure business perspective.

Anyway, we’re not sure which irony is more delicious. I guess using security FUD is a terrible idea for both companies and governments.

Ultimately, at BIML we believe everyone should just fix the damn software instead of trying to control powerful tools that find bugs. We want our Fable 5 access back too.

We think this blog entry by starseer.ai CEO Tim Schulz is important enough that we asked for permission to reprint it here. Do us a favor and check out starseer’s white box offerings—opening the black box of AI so you know what’s going on in there. REQUEST A STARSEER DEMO.

Anthropic’s latest release changes the relationship between the company and the people who build on its models. With this release, Anthropic is increasingly deciding what kinds of work its models will and will not do. There has always been some version of this around NSFW or clearly abusive use. The new release goes further: the guardrails are deliberately broad and flag a wide range of biology and cybersecurity questions, along with work that resembles AI and ML model development pipelines.

These restrictions are framed as AI safety. In practice they constrain what customers, including legitimate businesses, can do with a frontier model. That is a real problem for anyone whose business case depends on those capabilities.

Gatekeeping, by design

Project Glasswing is an example of the pattern. Early access went to the largest players, so a smaller company with a legitimate use case may simply be left out. The refusals do not just hit commercial use. They also reach research startups and academic institutions using AI to push toward cures for disease and other illnesses.

Anthropic’s own Fable release showcased exactly these capabilities, then gated them. According to Anthropic’s Fable 5 and Mythos 5 announcement, the Mythos-class model accelerated parts of drug design by roughly tenfold, designed proteins autonomously, and produced strong drug candidates for nine of fourteen protein targets.

Anthropic then routed most biology and chemistry requests on the public model to the older, less capable Opus 4.8, with full access gated behind a vetted, invite-only program. In effect, Anthropic is positioning itself as the gatekeeper for who may use frontier research capability in this domain. That is a chilling prospect for independent research.

This is a reliability problem

If Anthropic decides a use case overlapping with your business is now off-limits, you have little recourse. It points to a future where a handful of frontier providers become a hard dependency for how organizations deploy AI and agents, which should be a wake-up call.

Anyone building on frontier models needs to be testing alternatives and maintaining a fallback plan, because access can change. Models can be shut off, or a provider can dial up more restrictive classifiers for a period, for instance if a capability starts being used in active attacks, disrupting everyone on the service.

Until recently, the working assumption for most businesses was that frontier access was largely a matter of being able to pay for it. That is no longer the case.

Watching the sorting of who gets frontier access

Expect a continually expanding list of things Anthropic will not let you do. I am skeptical this actually stops sophisticated nation-state actors, since the top tier already has access to these capabilities. Access now depends heavily on your specific use case, and we are watching a sorting of who gets true frontier access. Frontier red teams, for instance, have long had pre-safety-training checkpoints that ordinary commercial customers never see.

As these companies head toward IPO and settle into a role as underlying infrastructure, customers will need real reliability guarantees. The current pace of change in capabilities and guardrails works against that. Anthropic has already walked back one of these guardrails, the one affecting ML work, so that it at least notifies you when your output is being degraded. But this is a policy posture that every enterprise will now have to set its own comfort level around, given how fast a major provider can shift the rules.

BIML’s thoughts about Paprenot’s eye-opening worm paper captured by Fortune. Sharon Goldman in one of the best AI security (MLsec) reporters out there.

Read the story here.

This long conversation on the Data Culture podcast features a great overview of the work we do at BIML, including coverage of why we are a non-profit. Have a listen..

Who dat?

BIML of course…in very good company.

Lots of old friends.

Alex Presiding.

And some takeaway messages encoded in bits.