AIToday
Large Language ModelsOpen-Source AITomasz Tunguz (Theory Ventures)Published: Nov 7, 2026, 06:01 JST

AI break-in cost falls 99% as Claude Mythos Preview, GPT-5.5 crack network

Send on LINE
AI break-in cost falls 99% as Claude Mythos Preview, GPT-5.5 crack network

3 Key Points

  1. What happened

    In April, Anthropic's Claude Mythos Preview and OpenAI's GPT-5.5 autonomously broke into a simulated 32-step, 20-server British corporate network priced at $5k to $10k; five months later Zhipu's GLM-5.3 matched Mythos's exploit rate for $90.

  2. Why it matters

    The 99% drop in the cost of a single break-in means defenders now face a much cheaper attacker, and security teams must decide how much defensive AI compute is enough to offset it.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, every morning.

Context & Analysis

The April test was a controlled simulation: a 32-step hack across 20 servers that would take a human expert 20 hours. Both Claude Mythos Preview and GPT-5.5 completed it without human help, and the Bank for International Settlements put a $5k to $10k price on the break-in. That figure set the baseline for what followed.

Over the next five months, the cost of the same break-in collapsed. Claude Mythos 5 dropped it to $770 in June, Claude Opus 5 to $385 in July, and Zhipu's open-weight GLM-5.3 matched Mythos's exploit rate for $90 — one-sixtieth of April's frontier cost. The trend points to a market where offensive AI compute is getting cheaper fast, while defenders still must inspect every alert.

That asymmetry is why the security operations center becomes the pressure point. AI agents can compress a 70-minute manual review into minutes for about $2 of compute per alert, but the SOC must still cover every alert, every hour. With non-human identities already outnumbering employees 82 to 1, the defensive compute requirement compounds — a dynamic the Hugging Face intrusion, with its 700-agent swarm, put on display.

FAQ
How much did the simulated break-in cost in April?
The Bank for International Settlements priced the April break-in at $5k to $10k.
Which model brought the cost down to $90?
Zhipu's open-weight GLM-5.3 matched Claude Mythos's exploit rate for $90.
How long did the Hugging Face intrusion take?
A swarm of 700 AI agents coordinated across four and a half days, exchanging 70,000 messages and executing 17,600 actions.
Tomasz Tunguz (Theory Ventures)Read Original Article
Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleShield AI raises $2B, buys Echodyne for $5.3B