🔍 Read the full analysis: How CERT-In Will Test Cybersecurity Vulnerabilities With Claude Mythos on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
A Moneycontrol headline reports that India’s cybersecurity agency, CERT-In, has access to Anthropic’s Claude Mythos to test cybersecurity vulnerabilities. The available reporting does not establish when access began, what systems are in scope, or whether any vulnerabilities have been found.
India’s CERT-In reportedly has access to Anthropic’s Claude Mythos to test cybersecurity vulnerabilities, according to the original Moneycontrol-based report. The available account does not say when the access began, what the testing covers or whether the work has produced any findings, leaving the scale and practical impact of the reported arrangement unknown.
The information available identifies CERT-In, India’s national cybersecurity agency, and Anthropic, the company behind Claude Mythos, whose AI security work has also drawn attention for advancing cybersecurity testing. It describes the stated purpose as testing cybersecurity vulnerabilities. The source material contains a headline but no accompanying article text, so it does not provide details about the arrangement or independent confirmation from either organization.
There is no reported list of systems or software under examination, no timeline for the work and no description of who is conducting the tests. It is also not clear whether CERT-In is working directly with Anthropic or using access under another arrangement. No vulnerabilities, affected products, vendor notifications or remediation steps are identified.
The report concerns access for cybersecurity testing; it does not say that Claude Mythos has been deployed in government systems or made available to the public, unlike reported interest from Japanese banks in using Mythos for cybersecurity. The available information also does not describe the model version, its role in the tests, human review of its outputs, or rules for handling sensitive technical information.
What AI Access Could Mean for CERT-In
If the report is accurate, the access could let CERT-In evaluate whether an AI model can assist with defensive vulnerability research and where human review or other safeguards are needed. That possibility matters as public agencies assess how AI tools may fit into security work. But it remains a potential benefit, not a documented result: the source provides no testing evidence or announced operational changes.
Vulnerability research can support remediation when findings are verified and responsibly shared. It can also involve sensitive information about software and systems. Because the reporting does not explain how outputs would be checked, protected or disclosed, readers cannot yet assess the project’s security impact or accountability measures. More detail about the process could clarify the work without requiring publication of technical information that could put systems at risk.
Products Worth Considering

Bose SoundLink Flex Bluetooth Speaker (2nd Gen), Waterproof, Dustproof, USB‑C, Up to 12 hr Battery, Black

Bose QuietComfort Ultra Headphones (2nd Gen), Wireless Bluetooth Noise-Cancelling Over-Ear Headphones, Black

LG UltraGear 32GX850A-B 32-inch 4K UHD Glossy OLED Gaming Monitor
As an affiliate, we earn on qualifying purchases.
The Reported CERT-In Arrangement
CERT-In is India’s national agency for responding to cybersecurity incidents. Anthropic is the company named in the Moneycontrol headline, which characterizes its model, Claude Mythos, as being available to CERT-In for vulnerability testing. The headline-level account does not identify a particular incident, product, disclosure or earlier phase of the work.
That limits what can be established about the development. The source material supplies no publication date for the Moneycontrol report, no statements from CERT-In or Anthropic, and no terms of access. It also provides no basis for comparing this reported arrangement with other programs. At present, the supported account is limited to reported access and a stated testing purpose.
Key Details Still Missing
The available information does not establish when testing began, how long access will last or which version of Claude Mythos is involved. It also does not say what tasks the model will perform, who will review its outputs, or whether Anthropic will participate directly in the work.
No results are reported. It remains unknown whether the testing has identified any vulnerabilities, whether any findings have been validated or whether software vendors or government bodies have been notified. The source also leaves open how sensitive data would be handled and whether any findings will be made public. Without statements or fuller reporting from the organizations, the precise terms and outcomes cannot be confirmed.
What CERT-In and Anthropic Could Clarify
Further reporting or statements from CERT-In and Anthropic could establish the scope and timing of access, the model version, the parties’ roles and the safeguards for sensitive information. Details about how human reviewers verify model outputs would help distinguish preliminary suggestions from validated security findings.
If vulnerabilities are confirmed, a later update could explain whether affected organizations have been notified and how remediation is being handled, while avoiding disclosure of exploitable technical details. Until such information is available, the development should be treated as a reported testing arrangement with no public findings disclosed.
Key Questions
What is CERT-In reportedly doing with Claude Mythos?
A Moneycontrol headline reports that CERT-In has access to Anthropic’s model to test cybersecurity vulnerabilities. The available account does not describe the testing process.
Have any vulnerabilities been found?
No findings are reported in the available source material. It does not identify affected products, validated vulnerabilities or remediation steps.
When did the testing begin, and what systems are included?
The source does not provide a start date, duration or list of systems in scope. Those details remain unconfirmed.
Is Claude Mythos being deployed in government systems?
The report describes access for vulnerability testing. It does not say that the model has been deployed in government systems or released to the public.
What should readers watch for next?
Statements from CERT-In or Anthropic could clarify the project’s scope, safeguards, responsibilities and any verified results. None of those details is established by the headline alone.
Primary source: Anthropic · via ThorstenMeyerAI.com
