Washington Pulled the Plug on Anthropic ‘s Fable 5 and Mythos 5 models. The Rest of the World Is Watching.
The organizations that had integrated these models into security operations, threat hunting pipelines, and vulnerability research workflows are now running on older Claude models or switching to GPT-5.5, which Anthropic pointedly notes can perform the same allegedly dangerous tasks without any export restriction. On Friday June 12 at 5:21pm ET, Anthropic received a letter from the US Commerce Department, signed by Commerce Secretary Howard Lutnick and drafted with officials from the Bureau of Industry and Security.
The AI Risk
The company filed a confidential IPO prospectus earlier this month disclosing a $47 billion revenue run rate and a $965 billion valuation.
Further details indicate that “We have reviewed a report that we believe is the basis of the government’s directive and validated that the level of capability displayed there is widely available from other models (including OpenAI’s GPT-5.5), and is used every day by the defenders who keep systems safe.
European governments, companies, and research institutions that had gained access to Fable 5 or Mythos 5, many of them partners under Project Glasswing, including NATO and ENISA, are now cut off with no notice and no timeline for restoration.
Anthropic wrote, but “as soon as possible” is doing a lot of work in that sentence given that the directive came from the Commerce Secretary with no expiration date.
Impact
on AI Systems
Because Anthropic cannot reliably distinguish foreign nationals from other users in real time, it did the only thing it could do: it disabled both models for everyone. Access to all other Anthropic models will not be affected.” The letter provided no specific national security rationale.
Safeguards
-
Because Anthropic cannot reliably distinguish foreign nationals from other users in real time, it did the only thing it could do: it disabled both models for everyone.
-
“The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.
-
“As we have stated publicly, we believe the government should have the ability to block unsafe deployments, as part of a statutory process that is transparent, fair, clear, and grounded in technical facts.
-
The company argues that restricting Fable 5 has limited impact if similar AI capabilities remain available from other providers.
-
The move doesn’t remove the technology from the market, only restricts access to one of the vendors offering it.
-
Anthropic says governments should be able to block unsafe AI deployments, but only through transparent, fair, and evidence-based processes.
Analysis
As AI tooling proliferates, security teams face expanding attack surfaces tied to model inference and data pipelines.
AI security teams should evaluate their model deployment pipelines for similar weaknesses, paying close attention to input validation, prompt injection defenses, output filtering, and access controls. Organizations building or deploying AI systems should incorporate adversarial testing and red-teaming exercises into their development lifecycle. Data governance policies may need updating to address the specific risks highlighted by this incident, including data leakage, model inversion, and unauthorized inference access. Security teams should also review logging and monitoring coverage for AI services, as traditional security tools may not detect model-specific attacks. Vendor security assessments should be refreshed for any third-party AI components in use.
SecurityXP delivers daily cybersecurity news, vulnerability analysis, data breach reports, and threat intelligence.
Security Digest
Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.
Related Articles
Is OpenAI Lockdown Mode an Admission of Risk? Enough?
As AI-powered chatbots expand across customer service, technical support, and enterprise workflows, they become increasingly attractive targets for attackers seeking to extract sensitive data.
AI/ML SecurityHackers Used Meta AI Bot to Steal Instagrams
High-profile Instagram profiles, including those of former US President Barack Obama, the U.S. Space Force, and Sephora, were compromised after attackers social engineered Meta's AI-powered support assistant.
AI/ML SecurityNew EU AI Security Regulations for Organizations
The European Union has introduced comprehensive AI security regulations requiring organizations to implement security measures for AI systems. We break down the requirements, timelines, and compliance steps.
AI/ML SecurityAlexa AI Attempts to murder a child
Amazon Alexa, also known simply as Alexa, is a virtual assistant technology largely based on a Polish speech synthesizer named Ivona, bought by Amazon in 2013. It was first used in the Amazon Echo ...