menu_open Columnists
We use cookies to provide some features and experiences in QOSHE

More information  .  Close

Moving From AI Risk To AI Governance

16 0
09.04.2026

AI’s capabilities are multiplying every week, with more possibilities and problems emerging with each new model or application launched. Anthropic’s Claude Mythos model embodies both: The power to detect long-unseen vulnerabilities in code that has been vital to programming for decades—and the ability to find weaknesses that could paralyze important computer systems.

Some of the things that Mythos has found are astounding: A nearly three-decade-old bug in OpenBSD, one of the most security-hardened operating systems, that would allow anyone to crash a machine remotely; a much-bypassed 16-year-old vulnerability in the video encoding library FFmpeg; and multiple places in the Linux kernel where someone could take over complete control of a computer.

The disclosure of Claude Mythos’s capabilities—and the tightly controlled way in which the platform’s preview is being released for cybersecurity—reinforces Anthropic’s position to the public as the moral center of the AI boom. After the company took a principled stand against the Pentagon’s potential uses of AI technology, keeping a platform that could disrupt the order of online society private shows that the company is considering the broader impact of AI.

For enterprises to work effectively with any AI, they need to develop a governance strategy to ensure their proprietary data is protected and that systems deliver high-quality outputs. I spoke with Andrew Gamino-Cheong, cofounder and CTO of AI governance company Trustible, about how to establish these standards. An excerpt from our conversation is later in this newsletter.

This is the published version of Forbes’ CIO newsletter, which offers the latest news for chief innovation officers and other technology-focused leaders. Click here to get it delivered to your inbox every Thursday.

Anthropic has a new AI cybersecurity model—Claude Mythos—that it is keeping private, only sharing it with a handful of companies that manage critical software through an initiative called Project Glasswing. The platform is a powerful tool for finding cybersecurity issues, and Forbes contributor Jon Markman writes that it identified thousands of zero-day vulnerabilities in critical systems in just a few weeks of testing—hence the company’s decision not to give the public access to it.

“The fallout—for economies, public safety, and national security—could be severe,” an Anthropic blog post states. “Project Glasswing is an urgent attempt to put these capabilities to work for defensive purposes.”

Markman writes that Claude Mythos will reset cybersecurity as a whole. Powerful AI that helps defenders can make the digital world much more secure, but a tool like this in the hands of bad actors could be devastating. Forbes contributor Paulo Carvão writes that the premium pricing model for companies using Claude Mythos also establishes a vital revenue stream for Anthropic.

ARTIFICIAL INTELLIGENCE

This week, Meta launched Muse Spark, its latest model in its quest for a bigger share of the AI market. The first AI model released under the leadership of Scale AI creator Alexandr Wang, Muse Spark is the beginning of Meta’s overhaul of its AI suite, a step........

© Forbes