
What happened
In April, Anthropic's Claude Mythos Preview and OpenAI's GPT-5.5 autonomously broke into a simulated 32-step, 20-server British corporate network priced at $5k to $10k; five months later Zhipu's GLM-5.3 matched Mythos's exploit rate for $90.
Why it matters
The 99% drop in the cost of a single break-in means defenders now face a much cheaper attacker, and security teams must decide how much defensive AI compute is enough to offset it.
Summaries like this, every morning.
The April test was a controlled simulation: a 32-step hack across 20 servers that would take a human expert 20 hours. Both Claude Mythos Preview and GPT-5.5 completed it without human help, and the Bank for International Settlements put a $5k to $10k price on the break-in. That figure set the baseline for what followed.
Over the next five months, the cost of the same break-in collapsed. Claude Mythos 5 dropped it to $770 in June, Claude Opus 5 to $385 in July, and Zhipu's open-weight GLM-5.3 matched Mythos's exploit rate for $90 — one-sixtieth of April's frontier cost. The trend points to a market where offensive AI compute is getting cheaper fast, while defenders still must inspect every alert.
That asymmetry is why the security operations center becomes the pressure point. AI agents can compress a 70-minute manual review into minutes for about $2 of compute per alert, but the SOC must still cover every alert, every hour. With non-human identities already outnumbering employees 82 to 1, the defensive compute requirement compounds — a dynamic the Hugging Face intrusion, with its 700-agent swarm, put on display.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
At a Simeji business meetup held at Google's Shibuya office on October 29, 2026, Simeji operating head Yu Furu…

At the 2026 World Internet Conference Wuzhen Summit, which opened on November 4, leading Chinese tech companie…

Ricursive Intelligence released Ripple-65B Preview under Apache 2.0 on Hugging Face, pretrained on 12 trillion…

A walkthrough of Anthropic's Claude Code shows first launch surfaces a warning that Claude can make mistakes…

The author turned the define-done skill's acceptance criteria into runnable acceptance tests and measured them

On Nov 5, 2026, installing PyPI-stable transformers 5.22.1 failed with 'Transformers does not recognize this a…
