+918679601119 / +918679401119
info@pcsa.in

CERT-In GETS ACCESS TO ANTHROPIC'S MYTHOS AI MODEL

04 Nov 2026

Tags: Prelims   Current events of national and international importance

Source: The Indian Express

Context: The Indian Computer Emergency Response Team (CERT-In) has received access to Anthropic's Claude Mythos Preview model under Project Glasswing to conduct controlled experiments on identifying software vulnerabilities.

Key Features of Claude Mythos

  • Cybersecurity capabilities: Can autonomously identify previously unknown software vulnerabilities and develop techniques to exploit them.
  • Zero-day vulnerabilities: Can discover security flaws unknown to software developers or for which no patch is available.
  • Scale: Anthropic reported identifying thousands of serious vulnerabilities, including in major operating systems and web browsers.

Project Glasswing

  • Launched: April 2026 by Anthropic.
  • Objective: Provide select cybersecurity organisations early access to powerful AI models to identify and fix critical software vulnerabilities before malicious actors exploit them.
  • Initial partners: Microsoft, Google, Amazon Web Services, Apple, Cisco and CrowdStrike.
  • Expansion: Anthropic announced expansion to approximately 150 additional organisations across 15+ countries in June 2026.
  • Access: Restricted to vetted organisations; Mythos was not released publicly due to its potential misuse for cyberattacks.

CERT-In's Experiments and Concerns

  • Limited testing: CERT-In is conducting small, controlled experiments rather than allowing extensive scanning of sensitive systems.
  • Data security: Concerns include exposure of sensitive government and critical infrastructure data to third-party servers.
  • Potential applications: Identifying vulnerabilities in critical sectors such as banking, telecommunications and power.

Important Prelims Facts

  • CERT-In: National nodal agency for responding to cybersecurity incidents under the Ministry of Electronics and Information Technology (MeitY).
  • Statutory basis: Section 70B of the Information Technology Act, 2000.
  • Functions: Cyber incident response, vulnerability alerts, security guidelines and coordination during cyber emergencies.
  • Zero-day vulnerability: A software security flaw unknown to the vendor or without an available fix, which attackers may exploit before remediation.

Prelims Question

Q1. With reference to CERT-In and its statutory functions, consider the following statements:

  1. CERT-In is the national nodal agency for responding to cybersecurity incidents under the Ministry of Electronics and Information Technology.
  2. Its statutory basis is provided under Section 70B of the Information Technology Act, 2000.
  3. CERT-In is responsible only for responding to cyberattacks and has no role in issuing vulnerability alerts or security guidelines.
  4. Its functions include coordinating responses during cyber emergencies.

Which of the statements given above are correct?

(a) 1 and 2 only
(b) 1, 2 and 4 only
(c) 2, 3 and 4 only
(d) 1, 2, 3 and 4

Answer: (b)

Explanation:

  • Statement 1 is Correct: CERT-In functions under MeitY as India's national nodal agency for cybersecurity incident response.
  • Statement 2 is Correct: Section 70B of the Information Technology Act, 2000 provides its statutory basis.
  • Statement 3 is Incorrect: Its functions also include issuing vulnerability alerts, security guidelines and advisories.
  • Statement 4 is Correct: It coordinates activities during cybersecurity emergencies.

Archive

More Links

Prelims Preparation Strategy UPSC Prelims Syllabus CSAT Prelims Strategy Mains Preparation Strategy UPSC Mains Syllabus Optional Subject Preparation Strategy Potential of Optional Subject List of Optional Subject UPSC Previous Year Papers Preparation Strategy for Mains