The WFE Publishes Position Paper On Mythos AI Cybersecurity Model

The World Federation of Exchanges (WFE), the global industry association for exchange groups and central counterparties (CCPs), has today published a new position paper, Mythos – Beyond the Headlines , examining recent developments in artificial intelligence (AI) and cybersecurity. Developed following analysis by the WFE's Cybersecurity Working Group (GLEX), which brings together market infrastructure cyber security leaders globally from member exchanges and clearinghouses, the WFE paper sets out an initial industry position following recent announcements about Anthropic's Mythos model. The paper emphasises that announcements regarding Mythos should be approached with appropriate seriousness. At this stage, the most effective near-term response is likely to be the continued strengthening of existing cyber resilience, operational resilience, and vulnerability management frameworks. Based on current information, Mythos reinforces an existing direction of travel in cybersecurity rather than introducing a fundamentally new threat. AI models are becoming capable of identifying vulnerabilities and automating known attack techniques, expanding their potential use in cyber operations. The priority for financial market infrastructures should be to continue strengthening cyber resilience through rigorous vulnerability management, patching, identity and access controls, software supply-chain assurance and incident detection and response. It also highlights the importance of continued industry coordination and information-sharing (via global industry forums such as WFE Cybersecurity Working Group) as the technology develops. Nandini Sukumar, Chief Executive Officer of the World Federation of Exchanges, said: "Models such as Mythos have drawn attention from boards, regulators and market participants. Based on what we have seen so far, the issue may reflect genuine technical progress and a degree of hype, typical of emerging technologies. The key question for us is whether organisations have good practices in place and how we continue to ensure the financial system is safe in an ever-changing cyber threat landscape." Richard Metcalfe, Head of Regulatory Affairs at the World Federation of Exchanges, said: "There is understandable concern around tools like Mythos falling into the wrong hands, but there is also a positive story here – we potentially have a tool that can help cybersecurity professionals identify vulnerabilities so they can focus on dealing with them." The paper calls for collaboration across the industry and with supervisors to share lessons, reduce duplication in vulnerability research and monitor changes in the cyber threat landscape. In next steps the WFE will continue to analyse emerging cyber security issues via its Cyber Security Working Group, gathering intelligence from members on cyber incidents and emerging attacker techniques as market infrastructures continue to work to make the financial system safer. The GLEX group, a unique group of practitioners and leaders in cyber security, will continue to bring that perspective and offer input via the WFE into regulatory developments to help inform future policy discussions.