Bank of America hires a thousand people to patch software vulnerabilities exposed by Anthropic Mythos

Bank of America, the second-largest US bank, hired an additional 1,000 external consultants to guard against high-performance AI models exploiting its software vulnerabilities. CEO Brian Moynihan disclosed this on the October 14 earnings call and said in a CNBC interview that the development of high-performance models such as Anthropic's Mythos has highlighted exploitable security flaws in code shared by the bank's internal staff and external vendors. He said 1,000 contract personnel were deployed in the second quarter to help with patching, on top of the 3,000 personnel already in place; the related spending exceeded several hundred million dollars, which, besides fixing software issues, also included costs for addressing anti-money-laundering compliance issues related to a $1.2 billion US Treasury sanctions penalty. Mythos is a restricted-access AI model known for its ability to find software weaknesses and use them for attacks, and it has been gradually released since April 2026 after safety guardrails were put in place. JPMorgan CEO Jamie Dimon told Bloomberg in early October that after the model's release, cybersecurity risk jumped 10-fold.

Bank of America has hired 1,000 external contractors to patch software vulnerabilities found by AI models such as Anthropic Mythos, according to CNBC. CEO Brian Moynihan said these contractors have worked alongside 3,000 internal employees since the second quarter, and the company spent several hundred million dollars in the third quarter combined on software work and anti-money-laundering requirements, without giving a separate figure for vulnerability patching. Anthropic released Mythos in April only to select partners through Project Glasswing, saying the model found thousands of critical security vulnerabilities, and OpenAI launched the Daybreak cybersecurity program in May. Bank of America is one of the first large U.S. companies to disclose this scale of patching staffing, and Moynihan expects patching costs to decline over time.

美国银行首席执行官 Brian Moynihan 对 CNBC 表示，该行聘请 1000 名外部承包商修补包括 Anthropic 的 Mythos 在内的先进 AI 模型暴露的软件漏洞，这些承包商目前仍在岗，另加该领域原有的 3000 名员工。Mythos 于 4 月向少数银行、科技公司和政府机构发布。Moynihan 称该行第三季度在软件修复及反洗钱合规监管问题上花费“两亿多美元”，并预计修复成本会随时间下降。他称该行约有 130 个内部 AI 项目，相关节省预计从今年的 3 亿美元升至 2027 年的 7 亿美元；过去一年员工人数减少约 3400 人，其中多少归因于 AI 尚不清楚。