Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark Ravie LakshmananNov 10, 2026Artificial Intelligence / Application Security Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models (LLMs) helped its engineers "complete otherwise-infeasible software migrations, designed three working electronic devices from scratch, solved two open problems in the physics of black holes, made substantial progress on robotics evaluations, and formalized the proof of Fermat’s Last Theorem in 30 hours." The artificial intelligence (AI) company said high-stakes risks arising from misalignment remain low, and claimed the models matched or performed better than Claude Opus 5.5, Claude Sonnet 5.5, and Claude Mythos 5.1 on most alignment measures, resistance to misuse, honesty, and factuality. "It was roughly an order of magnitude less likely than Opus 5.5 and Sonnet 5.5 to publish harmful content to public package registries without encouragement, though it still did so when encouraged by the simulated user," Anthropic noted in its system card. On Irregular's CyScenarioBench, which measures whether a model can plan and execute a multi-stage cyber operation in a realistic environment, Fable 5.2 completed 76.3% of all challenges, compared to 61.7% for Fable 5.1 and 61% for OpenAI's GPT-6 Cyber. In a pair of reports published over the last month, Irregular said Google's Gemini 4 Argon solved 12 challenges in the subset of the CyScenarioBench suite end to end, up from 5 for Gemini 3.8 Flash Cyber and none for Gemini 3.1 Pro. "On CyScenarioBench, GPT-6 Cyber completed 11 of 11 long-horizon scenarios at least once, compared with 8 of 11 for GPT-6 Astra. Its average success rate was 61%, an increase of 7 percentage points," the AI testing lab said. "On Atomic Challenges, GPT-6 Cyber solved all 22 challenges. Average success rates were 97% in vulnerability research and exploitation, 98% in network attack simulation, and 63% in evasion." Fable 5.2 also scored 89.6% on the CVE Rediscovery benchmark, Anthropic's own internal evaluation of whether an AI model can independently rediscover known vulnerabilities given only the affected source code. The assessment includes 1,829 advisories for open-source projects published in October 2026. Describing Claude Mythos 5.2 as its "most capable model for cybersecurity engineering," Anthropic said it can flag more vulnerabilities than prior models, while simultaneously getting better at reproducing and fixing them. As before, the model's cyber capabilities are accessible through its Cyber Verification Program. Claude Fable 5.2 is available on all platforms, including Amazon Web Services, Google Cloud, and Microsoft Azure. The development comes as Anthropic updated Claude Security with continuous code scanning and automatic fix tracking to help security teams monitor and address vulnerabilities as code changes. "Each finding comes with a severity rating, judged against your project's threat model, and an explanation of how an attacker could reach the vulnerable code, so teams can fix what's actually reachable first," Anthropic said. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. Application Security, artificial intelligence, cybersecurity, Vulnerability Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026 The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content The Flood is Coming And The Pipes Were Already Full Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out See How Bitdefender GravityZone Identifies Shadow AI and Prioritizes Endpoint Risks Detect Lateral Movement and Evasive Attacks With Corelight's Open NDR Platform Assess Your Organization's AI Code Sprawl Exposure With This Practical Guide Beyond CVE Scanning: Book a Demo of Continuous AI-Powered Web Pentesting Your SOC Has an Identity Blind Spot. Here's How to Fix It Learn how to close critical identity visibility gaps in your SOC, detect hidden threats, and accelerate incident response across human, machine, and AI identities. Attend Live Roadmap for AI-Ready Security Operations Evaluate Attack Surface Visibility With an AI Threat Readiness Framework Learn how to assess AI threat readiness, strengthen attack surface visibility, and prepare security operations for emerging threats in this practical webinar. Uncover Identity Dark Matter: SACR Research Brief Eliminate the blind spots undermining your security. Download the SACR brief. 11 Real Stories: How Identity Exposure Unlocks Active Attack Paths Map cross-domain privilege escalation to sever breach routes at key choke points. BeyondTrust an 8X Gartner® Magic Quadrant™ Leader for PAM Gain clarity on the PAM market and understand why BeyondTrust is again a Leader. Governance Sets the Ceiling on Your AI Security Program See the five moves that raise a Stage 2 Govern score to a defensible Stage 3. The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks Your Attack Surface Is Growing Faster Than Your Team Can Respond The MSP Margin Math Nobody's Doing: Your Next Technician Might Already be on Payroll PEDM vs. Standing Elevated Privileges: Control Access Without Flooding the Helpdesk