{"schema":"postcutoff/event@1","as_of":"2026-10-14T22:23:00+02:00","url":"https://postcutoff.com/e/2026-10-14-bank-of-america-1000-contractors-mythos-flaws/","md":"https://postcutoff.com/e/2026-10-14-bank-of-america-1000-contractors-mythos-flaws/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"human editor","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-10-14-bank-of-america-1000-contractors-mythos-flaws","date":"2026-10-14","date_precision":"day","short_title":"Bank of America says it hired 1,000 contractors to patch software flaws exposed by Anthropic's Mythos","deck":null,"takeaway":"After Bank of America's Q3 2026 results on Oct 14, CEO Brian Moynihan told CNBC that the bank brought on about 1,000 contractors in the second quarter to fix vulnerabilities in its internal and vendor software that advanced AI models, including Anthropic's Mythos, had surfaced.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":[{"n":1,"title":"CNBC: Bank of America hired 1,000 contractors to patch software flaws exposed by Anthropic's Mythos (Oct 14)","url":"https://www.cnbc.com/2026/10/14/anthropic-mythos-bank-of-america-hiring-cost.html","type":"press","group":"press","domain":"cnbc.com"},{"n":2,"title":"RuntimeWire: Bank of America added 1,000 contractors to patch AI-exposed software flaws","url":"https://runtimewire.com/article/bank-of-america-mythos-contractors-software-patching","type":"press","group":"press","domain":"runtimewire.com"},{"n":3,"title":"CryptoBriefing: Bank of America hires 1,000 contractors to patch flaws exposed by Anthropic's Mythos","url":"https://cryptobriefing.com/bank-of-america-contractors-anthropic-mythos/","type":"press","group":"press","domain":"cryptobriefing.com"}],"official":0,"filed":"2026-10-14","updated":"2026-10-14","orgs":["Bank of America","Anthropic"],"title":"Bank of America says it hired 1,000 contractors to patch software flaws exposed by Anthropic's Mythos","summary":"After Bank of America's Q3 2026 results on Oct 14, CEO Brian Moynihan told CNBC that the bank brought on about 1,000 contractors in the second quarter to fix vulnerabilities in its internal and vendor software that advanced AI models, including Anthropic's Mythos, had surfaced. It is one of the first concrete figures for what AI-found vulnerabilities cost a large company to remediate; the reported extra spending also includes anti-money-laundering work.","key_facts":["About 1,000 contractors added in Q2 2026 to patch flaws in 'internal and vendor software' surfaced by AI models including Mythos (Moynihan to CNBC, via RuntimeWire)","The higher Q3 costs reported with the contractor figure also cover anti-money-laundering work, so they are not a standalone price for Mythos remediation (RuntimeWire)","Bank of America was among the early banks testing Mythos by mid-2026 (CryptoBriefing)","A week earlier (Oct 6) JPMorgan's Jamie Dimon said Mythos pushed cyber risk up about 10-fold"],"key_numbers":[],"tags":["cybersecurity","mythos","banking","finance","vulnerability-remediation","earnings"],"science":null,"body_md":"## What happened\n\nAsked about rising costs on its third-quarter earnings day, Bank of America's CEO said part of the increase came from a\nremediation push: about 1,000 contractors hired in the second quarter to patch flaws that AI models had found in the bank's\nown and its vendors' code. CNBC's article returned 403 and was not read in full; the facts come from summaries that cite it.\nSearch snippets of CNBC mention about 3,000 internal staff working alongside the contractors and \"a couple hundred million\nplus\" in added Q3 costs; these numbers were not confirmed on a page we could open.\n\n## Why it matters\n\nBanks were among the first Project Glasswing users of Mythos. The finding that one bank needed a contractor army to keep up\nwith AI-discovered bugs shows the defensive side of AI cyber capability has a large labour cost, and matches the record\nOctober Patch Tuesday.","disputed":[],"related":[{"id":"2026-10-13-microsoft-october-patch-tuesday-record-1400-flaws","url":"https://postcutoff.com/e/2026-10-13-microsoft-october-patch-tuesday-record-1400-flaws/","date":"2026-10-13","date_precision":"day","short_title":"Microsoft's October Patch Tuesday fixes a record ~1,400 flaws, more than all of 2025, as AI-driven bug discovery floods vendors","deck":null,"takeaway":"Microsoft's October 13, 2026 Patch Tuesday fixed more than 1,400 vulnerabilities (1,411 per BleepingComputer, 1,413 per SecurityWeek), beating September's record of nearly 1,000.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"medium","status":{"key":"partly","labels":["Partly confirmed"]},"sources":4,"official":1,"filed":"2026-10-14","updated":"2026-10-14","orgs":["Microsoft"]},{"id":"2026-10-06-dimon-mythos-cyber-risk-10-fold","url":"https://postcutoff.com/e/2026-10-06-dimon-mythos-cyber-risk-10-fold/","date":"2026-10-06","date_precision":"day","short_title":"JPMorgan CEO Jamie Dimon says cyber risk went up 10-fold after Anthropic's Mythos","deck":null,"takeaway":"The head of the largest US bank, himself a Glasswing participant, put a number on how much frontier AI has changed cyber risk.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":5,"official":0,"filed":"2026-10-07","updated":"2026-10-07","orgs":["JPMorgan Chase","Anthropic"]},{"id":"2026-04-07-claude-mythos-preview-project-glasswing","url":"https://postcutoff.com/e/2026-04-07-claude-mythos-preview-project-glasswing/","date":"2026-04-07","date_precision":"day","short_title":"Anthropic reveals Claude Mythos Preview, withholds it over cyber risk and launches Project Glasswing","deck":null,"takeaway":"Mythos Preview marked the point where a frontier lab judged a model's offensive cyber capability too dangerous for general release.","category":"model-release","category_label":"Model releases","importance":5,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":11,"official":7,"filed":"2026-09-29","updated":"2026-10-01","orgs":["Anthropic"]}],"people":[],"posts":[],"videos":[],"models":[],"changes":[{"date":"2026-10-14","type":"filed","text":"Created"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-10-14","run":null,"sources_read":null,"updated":"2026-10-14","human_review":null,"version":null},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":167,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":106,"in_training_data":false},{"model_id":"gemini-4-argon","name":"Gemini 4 Argon","cutoff":"2026-03","days_after":197,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":136,"in_training_data":false}],"short_url":null}