The Trump administration asked a federal judge Wednesday to pause its appeal in the Anthropic Blacklist case — the clearest signal yet it needs the AI lab more than the fight. Twenty-four hours earlier President Trump told CNBC the company was shaping up and a Pentagon deal was possible. Two months ago his administration had ordered all federal agencies to stop using Anthropic's technology, The Hill reported.
What changed was a model that finds vulnerabilities in the software underlying banks, power grids, and governments. Anthropic announced Claude Mythos Preview two weeks ago. The Bank of England governor told parliament that Anthropic may have found a way to crack the whole cyber-risk world open. The European Central Bank began quietly questioning banks about their defenses. Canada's finance minister compared the threat to the closure of the Strait of Hormuz, according to the New York Times. Russia's state media called it worse than a nuclear bomb. The reaction from allied governments tracked a common pattern: alarm first, then quiet interagency review, Foreign Policy reported.
Reuters reported Tuesday the posture shift. Trump, asked about an Amodei meeting on the White House driveway, initially responded "Who?" Then he said he had no idea. By Thursday he was telling CNBC the administration would get along just fine with Anthropic. DOJ lawyers moved to pause the appeal 24 hours later, POLITICO reported.
The gap between what a model can find and what an organization can fix is the story. Anthropic has shared Mythos only with the United States and, outside the US, Britain. The scramble to understand what it can do and what defenses are possible has consumed weeks of interagency time in Washington, London, and Brussels, according to people familiar with the discussions.
The legal fight is not over. A federal appeals court earlier this month declined to block the Pentagon's blacklisting, a win for the administration in a separate challenge. Anthropic cannot participate in new Pentagon contracts under the current ruling, though it can continue working with other agencies while litigation continues. Anthropic also told a Washington federal appeals court Wednesday that it cannot manipulate its AI tool once deployed in classified Pentagon military networks — addressing what the Defense Department has said is a core concern about the company's ability to control its technology in sensitive settings.
The Pentagon banned Anthropic after the company sought assurances its tools would not be used to surveil Americans or operate autonomous weapons. Anthropic disputes that characterization and filed suit in March. The administration has not dropped the underlying concerns. What has changed is the calculus of whether to keep fighting.
Bruce Schneier, writing on his security blog, put the technical constraint plainly: there is a difference between finding a vulnerability and turning it into an attack, and that difference currently favors defenders. The window is not long.
Project Glasswing, announced alongside Mythos, is Anthropic's answer to that window. It brings together Amazon Web Services, Apple, Cisco, CrowdStrike, Google, JPMorgan Chase, Microsoft, NVIDIA, Palo Alto Networks, and the Linux Foundation, among others, in what the company describes as an urgent effort to use frontier model capabilities for defense before the same capabilities arrive in hostile hands. Anthropic committed up to $100 million in usage credits and $4 million in direct donations to open-source security organizations — the foundations whose code its own model had just found flawed.
Some researchers have pushed back on the scale of Anthropic's claims. AI safety engineer Heidy Khlaaf noted that Anthropic provided no data on false positive rates, how Mythos compares to existing cybersecurity tools, or how much human review was required. Gary Marcus initially said it was too early to assess; he has since written that Mythos is nowhere near as alarming as it first appeared. A security firm called Aisle was able to replicate some of the vulnerabilities using older, cheaper public models, Mashable reported, suggesting the findings may be more achievable than the announcement implied.
The question now is whether the conversation that happened at the White House produces anything beyond a pause in litigation. The administration is not yet a customer. The Pentagon dispute is not resolved. Glasswing is a pilot, not a procurement. The model found 181 ways into Firefox and a 27-year-old hole in an OS built by people who cared deeply about security, Anthropic reported. That is the thing that made the meeting feel necessary rather than routine. Whether it becomes the thing that changes the outcome is still open.