{"schema":"postcutoff/event@1","as_of":"2026-10-08T23:45:00+02:00","url":"https://postcutoff.com/e/2026-10-08-anthropic-cyber-mission-critical-infrastructure/","md":"https://postcutoff.com/e/2026-10-08-anthropic-cyber-mission-critical-infrastructure/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"Adam Bicz","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-10-08-anthropic-cyber-mission-critical-infrastructure","date":"2026-10-08","date_precision":"day","short_title":"Anthropic Cyber Mission: critical-infrastructure program and free open-source scanning","deck":null,"takeaway":"On October 8, 2026 Anthropic bundled its defensive cyber work into an \"Anthropic Cyber Mission\".","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":[{"n":1,"title":"Anthropic: Introducing the Anthropic Cyber Mission","url":"https://www.anthropic.com/news/anthropic-cyber-mission","type":"official","group":"primary","domain":"anthropic.com"},{"n":2,"title":"Axios: Exclusive: Anthropic's new plan to protect critical infrastructure","url":"https://www.axios.com/2026/10/08/anthropic-critical-infrastructure-cybersecurity","type":"press","group":"press","domain":"axios.com"}],"official":1,"filed":"2026-10-08","updated":"2026-10-08","orgs":["Anthropic","CrowdStrike","Palo Alto Networks","Dragos","Accenture","Deloitte"],"title":"Anthropic launches its 'Cyber Mission': a Critical Infrastructure Defense Program with 11 security firms, a free OSS Scanner for open-source maintainers, and free Claude Max for maintainers","summary":"On October 8, 2026 Anthropic bundled its defensive cyber work into an \"Anthropic Cyber Mission\". New pieces are a Critical Infrastructure Defense Program that gives frontier Claude models, on-site engineers and threat research to 11 founding security and industrial partners (CrowdStrike, Palo Alto Networks, Dragos, Rockwell Automation and others), and an opt-in OSS Scanner that runs free periodic scans of critical open-source projects with Anthropic's most capable models. It came two days after the Cyber Verification Program expansion and as JPMorgan's Jamie Dimon warned that Anthropic's Mythos had raised cyber risk tenfold.","key_facts":["Announced Oct 8, 2026 as the 'Anthropic Cyber Mission', grouping the Critical Infrastructure Defense Program (CIDP), the OSS Scanner, the Cyber Verification Program and Claude for Open Source (Anthropic)","CIDP founding partners (11): Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, Rockwell Automation. It is for companies building security products and services for critical infrastructure, and provides 'frontier Claude models, on-site engineers, and our threat research' (Anthropic)","OSS Scanner: enrolled core maintainers of critical open-source projects get free periodic scans 'from our most capable models'; each report includes a proof-of-concept exploit, an explanation and a suggested fix where available; Anthropic expects a true-positive rate above 90% (Anthropic)","Funding: the Defender Advantage Fund (0xDAF), launched in August 2026, keeps the OSS Scanner free; Anthropic also lists funding for the Python Software Foundation, Alpha-Omega, OpenSSF and the Apache Software Foundation (Anthropic)","Claude for Open Source: maintainers can apply for free Claude Max subscriptions (no number or duration given)","Earlier steps it builds on: Project Glasswing scans of hundreds of widely used open-source projects (April 2026) and a June 2026 program for state, local, tribal and territorial governments that Anthropic says now supports more than half of US states","Quote from CrowdStrike's Daniel Bernard: 'Critical infrastructure is where cyber risk becomes real-world risk'","Market reaction: CNBC reported that cybersecurity stocks dipped on the announcement (headline only; size of the move not checked)","The announcement does not name which Claude model the partners receive and does not mention Mythos"],"key_numbers":[],"tags":["anthropic","cybersecurity","critical-infrastructure","open-source","vulnerability-discovery","project-glasswing"],"science":null,"body_md":"## What happened\n\nAnthropic announced the \"Anthropic Cyber Mission\" on October 8, 2026 ([Anthropic](https://www.anthropic.com/news/anthropic-cyber-mission);\nfirst reported by [Axios](https://www.axios.com/2026/10/08/anthropic-critical-infrastructure-cybersecurity)). It brings existing\nprograms under one name and adds two new ones:\n\n- **Critical Infrastructure Defense Program.** Eleven founding partners from security vendors (CrowdStrike, Palo Alto Networks, Dragos,\n  Nozomi Networks, Insane Cyber), consultancies (Accenture, Booz Allen, Deloitte, PwC) and industrial firms (Hitachi, Rockwell\n  Automation) get frontier Claude models, Anthropic engineers on site and Anthropic's threat research, to build defenses for power,\n  water, manufacturing and other critical systems.\n- **OSS Scanner.** Core maintainers of critical open-source projects can opt in to free, periodic vulnerability scans by Anthropic's\n  most capable models. Reports come with a proof of concept and a suggested fix, and Anthropic expects more than 90% of findings to be\n  real bugs. The Defender Advantage Fund launched in August pays for it.\n\n## Why it matters\n\nAnthropic's strongest models now find and exploit vulnerabilities at a level that banks and governments treat as a systemic risk.\nThe program is Anthropic's answer: give defenders, especially under-resourced open-source maintainers and operators of physical\ninfrastructure, early and free access to the same capability. Cyber stocks have repeatedly fallen on Anthropic security news in 2026,\nand CNBC reported another dip on this announcement.","disputed":[],"related":[{"id":"2026-10-06-anthropic-cyber-verification-program-three-tiers","url":"https://postcutoff.com/e/2026-10-06-anthropic-cyber-verification-program-three-tiers/","date":"2026-10-06","date_precision":"day","short_title":"Anthropic folds Project Glasswing into a three-tier Cyber Verification Program","deck":"Reports 129K+ vulnerabilities found by partners","takeaway":"It said Glasswing partners found 129,000 verified vulnerabilities in April–July 2026 and its own open-source scanning another 5,500 through October, more than 33,000 of them critical or high severity.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":6,"official":1,"filed":"2026-10-07","updated":"2026-10-07","orgs":["Anthropic"]},{"id":"2026-10-06-dimon-mythos-cyber-risk-10-fold","url":"https://postcutoff.com/e/2026-10-06-dimon-mythos-cyber-risk-10-fold/","date":"2026-10-06","date_precision":"day","short_title":"JPMorgan CEO Jamie Dimon says cyber risk went up 10-fold after Anthropic's Mythos","deck":null,"takeaway":"The head of the largest US bank, himself a Glasswing participant, put a number on how much frontier AI has changed cyber risk.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":5,"official":0,"filed":"2026-10-07","updated":"2026-10-07","orgs":["JPMorgan Chase","Anthropic"]},{"id":"2026-08-27-collective-cyber-defense-letter","url":"https://postcutoff.com/e/2026-08-27-collective-cyber-defense-letter/","date":"2026-08-27","date_precision":"day","short_title":"OpenAI, Anthropic, Google and 100+ organizations sign an open letter calling for a global surge in cyber defense","deck":null,"takeaway":"It was the first industry-wide statement after an AI agent had actually carried out a real intrusion.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":6,"official":2,"filed":"2026-09-29","updated":"2026-09-29","orgs":["OpenAI","Anthropic","Google","Microsoft","Amazon","Oracle"]},{"id":"2026-04-07-claude-mythos-preview-project-glasswing","url":"https://postcutoff.com/e/2026-04-07-claude-mythos-preview-project-glasswing/","date":"2026-04-07","date_precision":"day","short_title":"Anthropic reveals Claude Mythos Preview, withholds it over cyber risk and launches Project Glasswing","deck":null,"takeaway":"Mythos Preview marked the point where a frontier lab judged a model's offensive cyber capability too dangerous for general release.","category":"model-release","category_label":"Model releases","importance":5,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":11,"official":7,"filed":"2026-09-29","updated":"2026-10-01","orgs":["Anthropic"]}],"people":[],"posts":[],"videos":[],"models":[],"changes":[{"date":"2026-10-08","type":"filed","text":"Created (Anthropic announcement; Axios exclusive; CNBC headline)"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-10-08","run":null,"sources_read":null,"updated":"2026-10-08","human_review":null,"version":{"date":"2026-10-08"}},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":161,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":100,"in_training_data":false},{"model_id":"gemini-3-8-flash","name":"Gemini 3.8 Flash","cutoff":"2026-03","days_after":191,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":130,"in_training_data":false}],"short_url":null}