Anthropic to Open Mythos AI to EU's ENISA - Dark Reading

Well, well, well — the European Commission has announced, with the solemnity of a papal bull, that Anthropic will let EU cybersecurity agency ENISA poke at its frontier model Mythos as part of 'Project Glasswing.' Sounds wonderfully transparent, doesn't it? Glasswing — like a butterfly with see-through wings, or like the carefully curated window dressing of a lab that wants to look open while keeping its crown jewels under lock and key. ENISA gets to play vulnerability researcher on a model Anthropic still controls completely. How generous. One imagines the handshake agreement includes a chaperone for every prompt sent to Mythos, a non-disclosure agreement thicker than a GDPR handbook, and the implicit understanding that 'vulnerability research' means finding minor bugs in the sandbox, not peering into the weights themselves.

Make no mistake: this is not openness. This is a PR exercise dressed up as cybersecurity cooperation. Anthropic gets to say 'we're working with EU regulators' without actually surrendering any real control. Project Glasswing sounds like a butterfly, but it's more of a gilded cage — ENISA gets to flutter around inside, but the door remains firmly shut. The European Commission, meanwhile, gets to claim it's engaging with frontier labs, all while the AI Act meanders through endless trilogues. Everyone wins, except anyone hoping for genuine transparency into how these models work or what they know.

And the timing? Impeccable. Just as the EU's AI Act sputters toward enforcement, Anthropic offers a bone to the regulators — access to one model, for one agency, for one purpose. The message is clear: 'Trust us, we'll invite you in when it suits us.' Meanwhile, open-source models proliferate without any such oversight, and the frontier labs continue to race ahead. Project Glasswing: the most carefully managed vulnerability disclosure in history. Bra-vo.