美国银行投入 4000 人修复 Anthropic Mythos 等 AI 模型发现的安全漏洞
Bank of America puts 4,000 people on fixing vulnerabilities uncovered by Anthropic's Mythos and other AI models
- 1美国银行雇用 1000 名外部承包商，与 3000 名内部员工自第二季度起修复 AI 模型发现的漏洞
- 2CEO 称第三季度软件修复与反洗钱合规合计花费数亿美元，未单独披露修补开支，预计成本会逐步下降
- 3Anthropic 4 月通过 Project Glasswing 向部分伙伴开放 Mythos，称该模型已发现数千个严重漏洞
- 4OpenAI 5 月推出 Daybreak 网络安全计划；美国银行是首批披露此类修复人力规模的美国大企业之一
AI 模型挖出的漏洞正从实验室警告变成大企业的真实人力与预算投入，安全修补进入规模化阶段。
- 影响：修复 AI 发现的漏洞成为新的成本项，美国银行三季度软件与反洗钱合规开支合计已达数亿美元且未单列修补费用；短期修补人力投入规模可观；同业也可能面临关于自身修补投入的披露压力。
- 参考：可考虑把漏洞修补与合规开支分开核算，先算清修补的真实成本；值得评估现有安全人力能否承接模型挖出的漏洞规模，以及是否接入此类安全模型的合作计划。
- 依据：人力与花费数据出自 CEO Moynihan 接受 CNBC 采访的口径；Mythos 发现数千个漏洞为 Anthropic 官方说法，另有独立评测确认新模型能力更强。
Oct 15, 2026
Bank of America has hired 1,000 outside contractors to fix software vulnerabilities uncovered by AI models like Anthropic's Mythos, CNBC reports. According to CEO Brian Moynihan, the contractors have been working alongside 3,000 internal employees since the second quarter. Moynihan said the bank spent a few hundred million dollars in the third quarter on the software work and on anti-money-laundering requirements combined. He didn't give a separate figure for patching alone.
In April, Anthropic released Mythos only to select partners through Project Glasswing and said the model had found thousands of serious security vulnerabilities. OpenAI followed in May with its Daybreak cybersecurity program. Critics initially dismissed the labs' warnings and countermeasures as PR, but the debate has since shifted. Security incidents like the Hugging Face hack changed the conversation, along with independent evaluations that confirmed the new models' stronger capabilities.
Bank of America is one of the first major US companies to disclose how many people it has assigned to fixing vulnerabilities that AI found. Moynihan expects patching costs to come down over time.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
来源：The Decoder：AI News · the-decoder.com