# ShinyHunters, schminyhunters: Who needs human hackers when you can have Mythos do the hard work?

**URL:** <https://www.artofsm.art/t/shinyhunters-schminyhunters-who-needs-human-hackers-when-you-can-have-mythos-do-the-hard-work/25701>\
**Category:** Content Creators\
**Tags:** hacking, anthropic, security, the-register\
**Created:** [11 October 2026 23:00 UTC](https://www.artofsm.art/t/shinyhunters-schminyhunters-who-needs-human-hackers-when-you-can-have-mythos-do-the-hard-work/25701 "2026-10-11T23:00:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![artesia](https://www.artofsm.art/user_avatar/www.artofsm.art/artesia/32/36_2.png) [@artesia](https://www.artofsm.art/u/artesia)\
**Post date:** [11 October 2026 23:00 UTC](https://www.artofsm.art/t/shinyhunters-schminyhunters-who-needs-human-hackers-when-you-can-have-mythos-do-the-hard-work/25701/1 "2026-10-11T23:00:17Z")

</div>

[![](https://www.artofsm.art/uploads/default/original/3X/b/7/b72e0157b1cb0183a0b0b59d894b08a2cd32d7d4.jpeg "ShinyHunters, schminyhunters: Who needs human hackers when you can have Mythos do the hard work?") ](https://www.youtube.com/watch?v=fwRdP5xsYqM)

In this episode of The Register’s Kettle podcast, hosts discuss the FBI’s crackdown on the ShinyHunters cyber extortion group, highlighting their sophisticated yet risky operations and the ongoing challenges in combating such threats. They also explore AI’s emerging role in cybersecurity, exemplified by Anthropic’s Mythos model uncovering critical vulnerabilities, emphasizing both the potential benefits and risks of AI-driven security tools in an evolving threat landscape.

---

<div class="post-metadata">

**Author:** ![artesia](https://www.artofsm.art/user_avatar/www.artofsm.art/artesia/32/36_2.png) [@artesia](https://www.artofsm.art/u/artesia)\
**Post date:** [11 October 2026 23:20 UTC](https://www.artofsm.art/t/shinyhunters-schminyhunters-who-needs-human-hackers-when-you-can-have-mythos-do-the-hard-work/25701/3 "2026-10-11T23:20:38Z")

</div>

In this episode of The Register’s Kettle podcast, host Brandon Vigliarolo discusses recent cybersecurity developments with Jess Lyons, cyber security editor, and Tom Clayurn, senior reporter. The conversation begins with updates on the FBI’s crackdown on the ShinyHunters cyber extortion group. The FBI has made multiple arrests, including a recent one involving a Canadian citizen detained in Pennsylvania, marking the first arrest on U.S. soil. The group is known for stealing vast amounts of data, including sensitive FBI personnel information, and claims their attacks are more about reputation than financial gain, although they have extorted millions over the past year.

The discussion highlights the paradox of ShinyHunters’ operations, noting their high skill level but questionable operational security, such as conducting attacks from within U.S. jurisdiction. Despite their claims of non-financial motives, their extortion business is lucrative, and their brazen attack on the FBI has led to increased law enforcement attention and arrests. The group’s brand appears resilient, continuing despite leadership changes or arrests, and their social engineering tactics remain sophisticated, sometimes aided by AI tools.

The conversation then shifts to AI’s role in cybersecurity, focusing on Anthropic’s Mythos model, which has recently identified a critical vulnerability in the open-source Rietto HTTP File Server. This vulnerability involved an insecure pseudo-random number generator that allowed attackers to bypass authentication and execute remote code. The flaw was quickly exploited in the wild after a proof-of-concept was published, demonstrating how AI can uncover complex bugs that might elude human researchers, raising questions about the implications of AI-driven vulnerability discovery.

The panel debates the responsibilities of AI developers like Anthropic in managing the security risks associated with their tools. While the discovery of vulnerabilities by AI is not inherently problematic, the rapid exploitation of such findings underscores the need for robust security programs and responsible disclosure practices. Anthropic has recently restructured its security programs to better support defenders and reduce misuse, reflecting growing awareness of the challenges posed by AI-enabled cyber threats.

Finally, the hosts reflect on the broader impact of AI on cybersecurity. While AI offers potential benefits for defenders, such as improved vulnerability detection and secure coding practices, the consensus is cautious. The security community recognizes that attackers only need to succeed once, whereas defenders must be right all the time, making the balance of power delicate. There is hope that increased focus on securing AI systems will improve safety, but historically, security tends to be an afterthought until significant incidents occur. The episode closes with the acknowledgment that AI will continue to shape the cybersecurity landscape in complex and unpredictable ways.

## Useful Links

- [FBI Announcement on ShinyHunters Arrests](https://www.nytimes.com/2026/10/09/us/politics/fbi-hack-shinyhunters-arrest.html) — Directly substantiates the claim about FBI arrests of ShinyHunters members.
- [Anthropic Mythos Model Official Documentation](https://www.contrastsecurity.com/glossary/mythos-ai) — Explains the AI model’s capabilities in vulnerability discovery discussed in the video.
- [Anthropic Security Programs and Responsible Disclosure](https://www.anthropic.com/responsible-disclosure-policy) — Explains Anthropic’s approach to managing AI security risks mentioned in the video.
