The performance gap between frontier closed-source AI and open-source models provides a crucial window for cybersecurity. "White hat" hackers use the most advanced models to find vulnerabilities before "black hat" hackers can exploit them with widely available open-source tools.

Anthropic's new AI model, Mythos, is so effective at finding and chaining software exploits that it's being treated as a cyberweapon. Its public release is being withheld; instead, it's being used defensively with select partners to harden critical digital infrastructure, signifying a major shift in AI deployment strategy.

A massive coalition led by NVIDIA argues open-sourcing AI is a net positive for security. They claim widespread access allows everyone to build defensive tools, countering the idea that open models are primarily an offensive threat. The recent hack of Hugging Face is their primary evidence.

The same AI models that can exploit system vulnerabilities are also the most effective tools for identifying and fixing those weaknesses. This duality creates a policy paradox: restricting the technology to prevent its misuse as a weapon also prevents its use as a defensive shield, leaving systems vulnerable.

An AI model capable of executing complex cyberattacks is equally capable of identifying and fixing those same vulnerabilities. A government like China's will likely first deploy the model for defense—patching critical systems—before any public or commercial release, thus mitigating risk.

The greatest cybersecurity risk is not powerful AI, but an imbalance where attackers possess capabilities that defenders lack. Open-sourcing models ensures defensive tools can evolve alongside offensive ones, creating a more resilient ecosystem. It empowers defenders to react faster and make the entire system safer for everyone.

Instead of keeping its most powerful models private to prevent misuse, OpenAI pursues a strategy of "ecosystem resilience." This involves a deliberate, step-by-step process of putting advanced AI tools into the hands of cybersecurity defenders to ensure critical infrastructure is protected as capabilities evolve.

Chinese models now match US counterparts in finding software bugs—a key defensive capability. By restricting public access to US models like Mythos over fears they could also exploit bugs, the government handicaps US defenders, leaving them unable to patch vulnerabilities that foreign AIs can already identify.

A coalition led by NVIDIA, and backed by major tech firms, argues that open models democratize defensive capabilities. They contend that providing universal access to advanced AI tools is crucial for widespread cyber defense, directly countering fears of their misuse by malicious actors.