Bank of America hired 1,000 contractors to patch holes that a single AI model blew open.

Brian Moynihan told analysts on Wednesday that Bank of America had spent "a couple hundred million plus" and hired 1,000 external contractors specifically to patch software vulnerabilities exposed by Anthropic's Mythos, a restricted AI model built to find and exploit weaknesses in code.

Turned out, there were a few. It revealed that one of the largest banks on earth had enough holes in its codebase to justify a nine-figure emergency remediation programme. Moynihan said BofA executives sat down when the frontier models started arriving and worked through what needed shoring up. The 1,000 contractors landed in Q2 and are still there.

JPMorgan's Jamie Dimon, who has previously spoken out against Mythos, told Bloomberg earlier this month that cybersecurity risks "went up 10-fold" after the model's release. Which is either a wild exaggeration or a completely horrifying statement of fact, and Dimon is not typically a man who reaches for understatement allegedly.

The unsettling implication is that these vulnerabilities were always there. The AI didn't create the holes, it just had the patience and the capability to find all of them at once.