Bank of America added 1,000 contractors to help patch software vulnerabilities in the second quarter of 2026, CEO Brian Moynihan told CNBC. He said they were still working at the bank when CNBC published its account on October 14, alongside about 3,000 people already in the area. CNBC described the work as spanning internal and vendor code and linked it to vulnerabilities exposed by advanced AI models, including Anthropic’s Mythos. (CNBC’s report on Moynihan’s remarks)
What the Q3 spending figure covered
Moynihan described third-quarter spending on software remediation and regulatory issues related to anti-money-laundering compliance together as “a couple hundred million plus.” The figure covered both categories.
What Anthropic says about Mythos Preview
Anthropic described Claude Mythos Preview as an unreleased model for defensive-security work and said it did not plan general availability. The company said the model had found thousands of high-severity vulnerabilities, including flaws in every major operating system and web browser. Anthropic announced Project Glasswing on April 7, 2026, named its launch partners, and said it had extended access to more than 40 additional organizations. Bank of America is not among the named launch partners. (Anthropic’s Project Glasswing announcement)
In its Project Glasswing video, Anthropic says Mythos was trained for coding rather than specifically for cybersecurity, with its cybersecurity capabilities emerging as a side effect.
