A New AI Model Just Changed the Cybersecurity Game. Washington Wasn’t Ready. | American Enterprise Institute
Publish Date: 2026-05-08 14:58:00
Source Domain: www.aei.org
In the span of 48 hours, the White House floated the idea of a Food and Drug Administration- (FDA) style pre-deployment vetting regime for frontier AI models, then immediately walked it back.
On Tuesday, POLITICO reported that the administration was circulating a 16-page draft executive order with provisions on cybersecurity, open-weight models, federal contracting, and a pre-release review system for the most capable AI systems. On Wednesday, National Economic Council Director Kevin Hassett previewed the thinking:
We’re studying possibly an executive order to give a clear road map to everybody about how this is going to go and how future AIs that also could potentially create vulnerabilities should go through a process so that they’re released to the wild after they’ve been proven safe. Just like an FDA drug.
By that evening, Chief of Staff Susie Wiles walked that back, saying the government is “not in the business of picking winners and losers” and would empower “America’s great innovators, not bureaucracy.”
The whiplash matters less than what produced it: an administration caught flat-footed by a capability jump, now scrambling to assemble a response.
The Mythos Moment
The catalyst is Anthropic’s new Mythos model, which early testing suggests can find and exploit software vulnerabilities. Anthropic has not released it publicly; it is being shared with a small set of tech, financial, and security organizations so defenders can patch holes. To give a sense of these capabilities: Mozilla reported that the Firefox team fixed more security bugs in April using Mythos than in the past 15 months combined.
The “Mythos moment” is not a one-model phenomenon. OpenAI also released a limited preview of GPT-5.5-Cyber, which finds and patches similar vulnerabilities.
A Self-Inflicted Blind Spot
Part of the reason the administration was caught off guard is its own doing. In March, Defense Secretary Hegseth…
