A confidential April memo alerted Canadian banks to rapid cyber threats posed by Anthropic\u2019s Claude Mythos. Immediate changes to detection and remediation timelines are urged.<\/p>\n
In Toronto on July 13, Canada\u2019s financial sector regulator warned the country\u2019s leading financial institutions about the risks of Claude Mythos from Anthropic and other advanced AI models. According to an email sent in April, new technologies may increase cyber threats and reduce the time institutions need to detect and remediate vulnerabilities.<\/p>\n
The Office of the Superintendent of Financial Institutions of Canada (OSFI) sent a letter to heads of technology, information security, and risk management in the financial sector, including large banks and insurers, as revealed by documents obtained under an access-to-information request.<\/p>\n
Regulators worldwide are attempting to assess cyber risks associated with frontier AI models, notably Mythos. Cybersecurity experts say that Mythos, a model capable of detecting and exploiting vulnerabilities, poses serious challenges for the banking sector and legacy systems.<\/p>\n
\u201cSuch advanced AI models as Anthropic Claude Mythos significantly shorten the timelines for effective risk mitigation.\u201d<\/p>\n
\u2013 Office of the Superintendent of Financial Institutions of Canada<\/p>\n
\u201cThus, this bulletin is based on our existing guidance and outlines practices institutions can adopt to increase the speed and effectiveness of risk detection, mitigation, and response.\u201d<\/p>\n
\u2013 Office of the Superintendent of Financial Institutions of Canada<\/p>\n
\u201cOSFI applies a technology-neutral, risk-based approach to new technologies, including advanced AI models such as Mythos. Our focus is not on the technology itself, but on how federally regulated financial institutions manage and govern the risks associated with its use.\u201d<\/p>\n
\u2013 OSFI<\/p>\n
In early April, the heads of Canadian banks met with regulators to discuss Mythos risks, not long after Scott Bessent and the then-chair of the Federal Reserve Jerome Powell called an urgent meeting with bank leaders to warn about cyber risks related to the latest Anthropic AI.<\/p>\n
OSFI sent the email to company executives on April 29.<\/p>\n
A rapidly changing landscape<\/p>\n
OSFI is responsible for regulating and maintaining the stability of Canada\u2019s financial system, covering banks, pension funds, and other regulated institutions, and monitors risks related to external influence, geopolitics, and new technologies.<\/p>\n
Some frontier AI cyber tools are considered controlled, with Mythos currently not subject to certain restrictions.<\/p>\n
Anthropic also had a rocky relationship with the US government: a judge blocked attempts to place Anthropic on the Pentagon\u2019s blacklist, and after the private release of Mythos, regulator attention to risks intensified.<\/p>\n
Three of the six largest Canadian banks \u2013 Royal Bank of Canada, TD Bank, and Bank of Montreal \u2013 stated plans to profit from their investments in AI, moving from experimental AI projects to applying them in chatbots, building internal tools, and reducing reliance on third-party solutions.<\/p>\n
Bank of Nova Scotia, CIBC, and National Bank also announced several AI initiatives.<\/p>\n
The Canadian government said it has access to Anthropic\u2019s Glasswing project, which allows companies to access Mythos. It is not known which Canadian banks use it. Some banks declined to comment and referred questions to the Canadian Bankers Association, which said that banks are investing heavily in safeguarding the financial system and comply with OSFI\u2019s cyber risk management and incident reporting requirements.<\/p>\n
In June, RBC\u2019s AI group head Bruce Ross said in an interview that Mythos highlights changes in the cyberattack landscape, making rapid response crucial since attack methods can emerge soon after new vulnerabilities are discovered.<\/p>\n
\u201cThe way we (the industry) deal with this is to build our own AI-based defense systems\u2026 we will continue to do just that.\u201d<\/p>\n
\u2013 Bruce Ross<\/p>\n
Canadian regulators continue to monitor AI development in the financial sector and stress the importance of timely and controlled adaptation to protect customers and the financial system from cyber risks.<\/p>\n","protected":false},"excerpt":{"rendered":"A confidential April memo alerted Canadian banks to rapid cyber threats posed by Anthropic\u2019s Claude Mythos. Immediate changes…\n","protected":false},"author":2,"featured_media":104925,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[54366,53,54367,2213,2407,66,15093,54365],"class_list":["post-104924","post","type-post","status-publish","format-standard","has-post-thumbnail","category-anthropic","tag-ai-cyber-risk","tag-anthropic","tag-canadian-banks","tag-claude-mythos","tag-frontier-ai","tag-news","tag-osfi","tag-osfi-claude-mythos-ai-cyber-risk-canadian-banks-anthropic-frontier-ai"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/104924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=104924"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/104924\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/104925"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=104924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=104924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=104924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}