> ## Content Index
> Fetch the complete content index at: https://www.bushletter.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# JPMorgan boss warns AI multiplies global cyber risk tenfold
- URL: https://www.bushletter.com/dimon-says-mythos-pushed-cyber-risk-up-tenfold/
- Published: 2026-10-07T08:00:00.000Z
- Updated: 2026-10-13T08:47:01.000Z
- Description: Researchers say Anthropic's published claims lack independent reproduction, while financial services firm FIS uses the restricted model for defence.
- Author: Bushletter Newsroom
- Tags: Cybersecurity, US, Anthropic, Technology, Business

TLDR

JPMorgan Chase CEO Jamie Dimon told Bloomberg Television that Anthropic's Mythos AI model multiplied global cybersecurity risk tenfold and exposed banks to vulnerabilities they had not previously encountered. Security researchers dispute the figure as unquantified and self-evaluated by Anthropic.

## The verdict from the top of Wall Street

JPMorgan Chase CEO Jamie Dimon told Bloomberg Television that Anthropic's Mythos model increased global cybersecurity risk by roughly ten times and exposed banks to vulnerabilities they had not previously known about.[\[1\]](https://www.investing.com/news/economy-news/jpmorgans-dimon-warns-of-tenfold-rise-in-cyber-risk-from-ai-4934894?ref=bushletter.com) Dimon offered no methodology alongside that figure, just the number and a warning.

Dimon said he had already published his chairman's letter naming cyber as JPMorgan's single biggest risk, and that the risk assessment jumped tenfold once Mythos became available.[\[1\]](https://www.investing.com/news/economy-news/jpmorgans-dimon-warns-of-tenfold-rise-in-cyber-risk-from-ai-4934894?ref=bushletter.com) He said AI created vulnerabilities that banks had simply not encountered before. That claim is worth examining, because the arithmetic behind a tenfold multiplier is doing a great deal of work.

## What Mythos actually is

Claude Mythos 5.1 is the same underlying model as Claude Fable 5.1, differentiated by cybersecurity and life sciences safeguards, and available only through Anthropic's Cyber Verification and Life Sciences Verification Programs.[\[2\]](https://www.anthropic.com/claude-fable-and-mythos-5-1?ref=bushletter.com) Anthropic first previewed Mythos in April 2026 alongside a 244-page system card, which claimed the model autonomously rediscovered 181 full-exploit runs out of 250 trials across 50 crash categories.[\[6\]](https://www.flyingpenguin.com/the-boy-that-cried-mythos-verification-is-collapsing-trust-in-anthropic/comment-page-1/?ref=bushletter.com)

Security researcher Flying Penguin argued that the Mythos-specific claims are self-evaluated by the vendor, unquantified in the technical document, unreproduced by any named external party, and contradicted by the system card's own figures when read past the headline.[\[6\]](https://www.flyingpenguin.com/the-boy-that-cried-mythos-verification-is-collapsing-trust-in-anthropic/comment-page-1/?ref=bushletter.com)

## Access controls and the export freeze

The US government issued an export-control directive on 12 June 2026 suspending all access to both Fable 5 and Mythos 5 for foreign nationals, forcing Anthropic to disable the models for compliance.[\[4\]](https://www.anthropic.com/news/fable-mythos-access?ref=bushletter.com) That directive came almost four months before Dimon's Bloomberg interview.

Anthropic controls Mythos access through Project Glasswing, its restricted-access initiative for vetted organisations. Financial-services firm FIS joined Glasswing to deploy Mythos for defensive security work, and FIS says its security posture draws on active engagement with the Financial Services Information Sharing and Analysis Centre and the Financial Services Sector Coordinating Council.[\[3\]](https://www.investor.fisglobal.com/news-releases/news-release-details/fis-and-anthropic-extend-partnership-trusted-ai-financial?ref=bushletter.com) The dual-use problem sits right there: the same model a bank uses to find its own holes is the one Dimon says adversaries are using to find them first.

## The defender's counter

Vinnie Liu, CEO and co-founder of security firm Bishop Fox, said that AI makes capable security researchers more effective while enabling less skilled practitioners to produce polished but inaccurate output at scale, and that the reconciling variable is the harness built around the model and the expertise of the person driving it.[\[5\]](https://bishopfox.com/blog/mythos-doesnt-deploy-itself?ref=bushletter.com)

That cuts both ways for Dimon's thesis. If the harness and the operator determine the outcome, restricting Mythos to vetted programs through Glasswing is the right lever to pull, and the tenfold figure becomes a function of who gets access and what they build around it rather than a fixed property of the model itself. Anthropic's September 2026 release formalised Mythos 5.1 alongside Fable 5.1, keeping the verification requirement in place as the primary access gate.[\[2\]](https://www.anthropic.com/claude-fable-and-mythos-5-1?ref=bushletter.com)

KEY TAKEAWAYS

01Dimon called cyber the biggest risk JPMorgan faces, saying Mythos pushed that risk up tenfold.

02Claude Mythos 5.1 shares Fable's core but adds cybersecurity and life sciences safeguards, restricted to verified programs.

03A US export-control directive in June 2026 suspended Mythos access for all foreign nationals.

04FIS uses Mythos defensively through Project Glasswing, illustrating the model's dual-use character.

05Dimon gave no method for his tenfold figure, and critics say Mythos's own published claims are vendor-tested and unreproduced.

SOURCES & CITATIONS

1. [JPMorgan's Dimon warns of tenfold rise in cyber risk from AI](https://www.investing.com/news/economy-news/jpmorgans-dimon-warns-of-tenfold-rise-in-cyber-risk-from-ai-4934894?ref=bushletter.com)
2. [Claude Fable and Mythos 5.1](https://www.anthropic.com/claude-fable-and-mythos-5-1?ref=bushletter.com)
3. [FIS and Anthropic extend partnership for trusted AI in financial services](https://www.investor.fisglobal.com/news-releases/news-release-details/fis-and-anthropic-extend-partnership-trusted-ai-financial?ref=bushletter.com)
4. [Fable and Mythos access update](https://www.anthropic.com/news/fable-mythos-access?ref=bushletter.com)
5. [Mythos doesn't deploy itself](https://bishopfox.com/blog/mythos-doesnt-deploy-itself?ref=bushletter.com)
6. [The boy that cried Mythos: verification is collapsing trust in Anthropic](https://www.flyingpenguin.com/the-boy-that-cried-mythos-verification-is-collapsing-trust-in-anthropic/comment-page-1/?ref=bushletter.com)

FREQUENTLY ASKED QUESTIONS

What is Claude Mythos and how does it differ from Fable?

Claude Mythos 5.1 uses the same core model as Claude Fable 5.1 but is configured with additional cybersecurity and life sciences safeguards. Access is restricted to organisations verified through Anthropic's Cyber Verification and Life Sciences Verification Programs.

What did Jamie Dimon say about Mythos?

Dimon told Bloomberg Television that Anthropic's Mythos model increased global cybersecurity risk by about tenfold and created vulnerabilities banks had not previously encountered. He described cyber as JPMorgan's single biggest risk.

Why is the tenfold figure disputed?

Security researchers note the figure is self-evaluated by Anthropic, unquantified in the technical documentation, and unreproduced by any named external party. Bishop Fox's Vinnie Liu argues outcomes depend more on the operator and the systems built around a model than on the model itself.

What is Project Glasswing?

Project Glasswing is Anthropic's controlled-access initiative that grants vetted organisations, including financial-services firm FIS, access to Mythos for defensive security purposes.