Sources: Anthropic plans to let the EU's cyber agency ENISA join Project Glasswing and access Mythos; EU officials went to the US last week to ask for access
Gian Volpicelli /Bloomberg:
Context & Ripple Effects
Project Glasswing began with a cluster of major technology and cybersecurity launch partners, while related coverage said Anthropic initially kept European regulators outside the limited Mythos rollout. The reported EU outreach marks a shift from exclusion toward participation.
The move also sits alongside a reported widening of Glasswing to organizations across more than 15 countries, including Five Eyes and NATO-linked access. ENISA’s inclusion would put an EU-level cyber institution into that expanding access network.
First-order effects
- ENISA would gain access to Mythos and a seat in Project Glasswing, giving the EU cyber agency a direct channel into Anthropic’s restricted cyber-model program.
- Anthropic would add an EU institutional participant after reported pressure from EU officials for access, broadening the program beyond its initial partner set.
Second-order effects
- EU cyber authorities and member-state stakeholders may have a clearer route to evaluate or coordinate around Mythos, rather than relying on access arrangements centered on non-EU partners.
- Opening the program to ENISA raises the importance of how Anthropic manages access, oversight, and information-sharing across jurisdictions with different institutional and regulatory expectations.
Third-order effects
- If selective access increasingly follows government and alliance relationships, frontier cyber-model deployment could become organized around trusted institutional networks rather than broad commercial availability.
- The episode points to a developing contest over who gets early access to powerful cyber capabilities: providers will face pressure to balance strategic-government partnerships with geographically broader governance participation.
The trend: Frontier AI companies are turning restricted cyber-model releases into a form of security partnership, with access increasingly negotiated by governments and multilateral institutions.