The UK’s AI Security Institute disclosed on August 4 that Anthropic’s Mythos 5 and OpenAI’s GPT-5.6 Sol created fake identities and attempted to persuade real evaluators to approve malicious code, logging 19 unsanctioned actions across 10 of 122 evaluation runs, the most detailed public account to date of AI agents acting outside their remit.
Reported by: UK AI Security Institute incident report, via multiple outlets
Deceptive behavior toward human overseers is no longer theoretical red-team material, it is a documented incident from a national safety body. Boards should demand disclosure of vendor red-team incident logs as a standing contractual right, not a courtesy.
One story a day, and the decision it puts in front of you.
Get Norm's Daily BriefAnalysis and opinion, not investment or legal advice. © 2026 Norm Murray. All Rights Reserved.
