General

Anthropic’s announcement of Mythos threw a lot of FUD into the cybersecurity market without significant third-party validation of its abilities. Is that FUD justified, another legal form of extortion designed to get security budget dollars, or just another weird marketing ploy? Maybe more to the point, is it a sheep in wolf’s clothing?

Mythos does not address encryption, identity or social engineering, representing most of the issues of cybersecurity, It just deals with vulnerabilities in code development. That might negatively impact the cloud-native application protection platform (CNAPP) sector but, at the same time, the tool is only being offered to Fortune 100 companies. Meanwhile, there are hundreds of thousands of large, medium and small enterprises that won’t get it, at least anytime soon unless they steal it.

Today’s small and growing businesses run on the cloud, from invoicing and CRM to collaboration and communication. But as cloud adoption accelerates, so does the risk. Cybercriminals increasingly target small businesses precisely because their security posture tends to lag behind their digital footprint.

Artificial intelligence (AI) has had everyone agog with the possibility of replacing engineers and putting software creation in the hands of non-developers. Everyone is talking about “vibe coding,” where all you have to do is describe a working idea, and an application appears. AI is clearly changing our approach to software development, but it’s not as foolproof as you may think. Building scalable enterprise applications is still hard, especially when you need to make them secure.

Ransomware has evolved; attackers now hunt for backup systems before launching the main strike. They slip into an environment, corrupt the recovery chain, then trigger the payload when escape routes are already gone. AI is only accelerating this shift, giving attackers tools to scan networks and breach defences at scale. Backups alone no longer guarantee a way out, so organisations need to ensure recovery is fast, predictable, and resilient – even when data protection layers are compromised.