When AI Finds the Bugs: Building an AI-Ready VulnOps Capability for the Public Sector with Blackwire Labs

In April 2026, Anthropic's Mythos model showed that AI can now autonomously discover and weaponize software vulnerabilities faster than any human team, generating working exploits with a 72% success rate, including a 27-year-old OpenBSD flaw. In one test, Mythos produced 181 working Firefox exploits from a single prompt, where Claude Opus 4.6 managed only two.

This accelerates a trend already underway. VulnCheck's 2026 Exploit Intelligence Report (covering 2025, before Mythos-class models reached wide deployment) tracked 14,400+ exploits across 10,480 CVEs and 884 new Known Exploited Vulnerabilities, with nearly 29% exploited on or before the CVE's publish date, up from 23.6% the year before.

Traditional vulnerability management, built around quarterly scans and 30-60 day patch cycles, wasn't designed for a world where a third of exploited vulnerabilities are already in play on day zero. High-risk vulnerabilities need to be treated as operational events, not backlog items.

Watch Blackwire Labs and VulnCheck's on-demand briefing on what this means for Government security teams and how to respond, covering:

• AI-driven vulnerability risk and shrinking defender timelines
• What's actually being exploited in 2025
• The rise of AI-generated exploit code in open-source channels
• What a Mythos-ready VulnOps function looks like
• Live demo: vulnerability enrichment in Blackwire.ai