Sam: Claude Mythos Preview just became the first AI model to clear every cyberattack simulation in the UK's AI Security Institute test suite. Every single one. And that matters not because of the benchmark label, but because of what the AISI simulations actually test — end-to-end attack chains, not isolated subtasks. Finding a vulnerability is one thing. Chaining recon, exploitation, and lateral movement together is a different capability entirely. Mythos did that across the board.

Priya: Welcome to AI Revolution for Friday, May 15th, 2026. I'm Priya Nair.

Sam: And I'm Sam Kim. Big day. We've got the Mythos result and what it means for the trajectory of AI cyber capabilities, Microsoft running over a hundred AI agents against each other to hunt Windows vulnerabilities, the strange paradox of US-approved chip sales that Beijing itself is blocking, and a few shorter hits on the competitive landscape — Claude Code losing its Microsoft license, Gemini eating ChatGPT's lunch in web traffic, and a utility company choosing data centers over forty-nine thousand residents. Let's get into it.

Priya: So let's start with Mythos, because I want to make sure people understand what the AISI evaluation framework is actually measuring and why clearing it is a different kind of result than most benchmarks.

Sam: Right, so the UK AI Security Institute has built simulations that require a model to complete full attack workflows — not "can you write shellcode" or "can you describe a CVE," but can you reason through an engagement from initial access to objective completion. The cognitive load there is substantial. You have to hold a mental model of the target environment, adapt when things don't work, and sequence actions that depend on each other. Prior models would succeed on individual stages but fall apart on the coherent multi-step reasoning required to chain them.

Priya: And Mythos is doing this reliably enough to clear all of them.

Sam: Consistently. Which brings us to the acceleration story, because this is where I think people need to sit with the numbers for a second. The AISI had estimated AI cyber capability was doubling roughly every eight months. They revised that down to 4.7 months. And now Mythos has blown past even that revised estimate. Logan Graham, Anthropic's head of red teaming, said he expects Mythos to look, quote, "quite dumb" within a year. That's a person who red-teams frontier models for a living saying the current state-of-the-art is going to look primitive in twelve months.

Priya: The dual-use tension here is real and worth naming directly. The same capability that lets a model chain together an attack workflow is the capability you want for automated defense — finding attack paths before adversaries do, running continuous red-teaming on your own infrastructure. These aren't separable.

Sam: They're not. And that leads into the Microsoft MDASH story, which is essentially what operationalizing the defensive side looks like at scale. Microsoft built a system with more than a hundred specialized AI agents that compete against each other to find vulnerabilities in Windows. The adversarial structure is the key design choice — you're not just running one agent and hoping it finds things, you're setting up a tournament where agents with different specializations are effectively red-teaming each other's outputs.

Priya: Can you break down why that architecture is better than just running a single powerful agent?

Sam: A single agent has a fixed strategy. It has blind spots baked into however it was trained or prompted. When you run a hundred agents with different approaches — different specializations in memory corruption, privilege escalation, network exposure, whatever — they cover different parts of the search space. And when they compete, the system can use disagreement as a signal. If ninety agents miss something and ten catch it, that's useful information. On a single Patch Tuesday, MDASH surfaced sixteen vulnerabilities in Windows, four of them critical. That's production-grade output, not a research demo.

Priya: Microsoft hasn't said which models are running under the hood, which is notable in itself.

Sam: It is. Probably a mix, possibly including models they're not ready to name publicly. Worth watching what they disclose over time.

Priya: Okay, let's talk about the chip story, because the structure of this situation is genuinely weird. The US cleared roughly ten Chinese companies — Alibaba, Tencent, ByteDance — to buy up to 75,000 Nvidia H200s each. That's a significant compute allocation. And zero chips have shipped.

Sam: Because Beijing is reportedly blocking the purchases. Commerce Secretary Lutnick's framing is that China is protecting its domestic chip industry — essentially Huawei's AI chip business — by preventing Chinese firms from buying US hardware even when US export controls would allow it.

Priya: So you have the US government approving sales that its own export control apparatus spent years trying to restrict, and China blocking purchases that would benefit its own leading AI companies, to protect a different domestic interest.

Sam: The political economy here is layered. Chinese tech companies would presumably prefer H200s — they're better than what Huawei currently offers. But Beijing is betting that forcing those companies to use domestic chips accelerates Huawei's roadmap and reduces long-term dependence on US supply chains. It's a painful short-term tax on Chinese AI labs to buy strategic optionality.

Priya: Which connects to the Anthropic policy paper, where they're making a now-or-never argument to Washington about locking in the US compute lead. The timing is deliberate — there are infrastructure and export control decisions coming up. Anthropic's laying out two scenarios for 2028: the US maintains its compute advantage, or authoritarian regimes end up setting the governance defaults for the AI era. We should note that's Anthropic's framing — it's advocacy, not neutral analysis.

Sam: Absolutely. Frontier labs have real interests in how these policy conversations go. That doesn't mean the underlying strategic picture is wrong, but readers should weight it accordingly.

Priya: Quick hits. Microsoft is revoking Claude Code licenses for thousands of its own developers and redirecting them to GitHub Copilot CLI. Developers were actively using Anthropic's tool — Microsoft is now pulling it and betting on its own stack. This is predictable behavior for a platform company with its own competing product, but it does raise a question about how willing enterprises are to let external AI tools get embedded in their development workflows before the platform eventually makes a move.

Sam: On the traffic side — ChatGPT's web share dropped from 77.6% to 53.7% in twelve months. Gemini went from 7.3% to 26.7%. That's a massive redistribution. The important caveat is this is web traffic only — not API usage, not mobile. API consumption is where enterprise usage lives, and that picture looks different. But web traffic reflects consumer mindshare, and Google's distribution advantage is showing up in these numbers in a way it wasn't a year ago.

Priya: And briefly — an energy supplier in the Lake Tahoe area is prioritizing Nevada data center load over 49,000 California residents. This is one data point, but it's a concrete example of a tension that's going to become more common. Gallup has 71% of Americans opposed to data centers near their homes. The infrastructure buildout for AI compute is going to run into community and regulatory resistance at a scale the industry hasn't fully reckoned with yet.

Sam: Let's close with what we're actually watching from here. The Mythos result combined with MDASH points toward something important: the question of whether AI materially changes the offense-defense balance in cybersecurity is no longer hypothetical. We're seeing it happen. What we don't know yet is the rate at which defensive deployments scale relative to offensive capability. MDASH is one team at one company. Automated offensive tools spread faster than institutional defensive deployments historically have.

Priya: The chip standoff is the thing I keep coming back to. If Beijing is genuinely blocking H200 purchases to protect Huawei's roadmap, that's a signal that China is playing a longer game on semiconductor independence than the export control conversation usually assumes. The compute gap that US policy is trying to maintain may be more durable than critics argue, but it's also more deliberately contested than optimists assume.

Sam: And on the capability trajectory — Logan Graham's comment that Mythos will look dumb in a year deserves to be taken seriously. That's not hype, that's someone with direct visibility into what's in the pipeline telling you to update your priors about the timeline. Whatever your mental model of where AI capabilities land in 2027, it probably needs to move.

Priya: That's Friday. Thanks for listening to AI Revolution. Show notes and links to everything we covered today are at cleartext.fm.

Sam: Have a good weekend. We'll be back Monday.