The Trump administration has ordered Anthropic to restrict access to its most advanced AI models, Fable 5 and Mythos 5, citing national security concerns. Officials raised the possibility that these systems could be used by foreign actors to identify software vulnerabilities or support cyber attacks.

To enforce the decision, the government used export control authorities, and because the order extends to foreign nationals globally, Anthropic stated they had to “abruptly” disable Fable 5 and Mythos 5 for all their customers to ensure compliance with the directive.

This has quickly become an early test case for how aggressively governments will step in to limit AI deployment. It also exposes a practical tension between how risk is being defined and how security actually operates.

Restricting Access Changes Who Has the Advantage

The concern driving this action is straightforward. Advanced AI capabilities like creating proof-of-concepts for vulnerabilities could be misused, and limiting access is seen as a way to reduce that risk.

The challenge is that the ability to analyse code, identify weaknesses, and accelerate discovery is already available across multiple AI systems, not just Anthropic’s models, and adversaries creating open-source and open-weight models aren’t far behind in their capabilities.

Restricting access, like the Department of Commerce has directed, does not make any advanced capabilities the models are capable of disappear, including turning those proofs of concept into fully autonomous attack chains. That capability will remain available to attackers through other tools, in other environments, and to actors willing to look for it. What governmental restrictions change is how easily defenders can access it.

Security teams depend on these tools to do their jobs. They use AI every day to surface vulnerabilities faster, investigate alerts at scale, and respond to incidents before they spread. Those are not edge use cases. They are part of normal operations.

When access is pulled back broadly, the impact shows up quickly. Vulnerability detection slows. Investigations take longer. Response timelines stretch at the exact moment speed matters most. Teams that are already understaffed are forced to absorb additional manual work, which increases pressure across the board. The net effect is a shift in advantage. Those defending systems lose efficiency inside governed, visible environments, while those looking for weaknesses continue to adapt using whatever tools are available to them.

The Focus Should Be On Misuse, Not the Tools Themselves

There is a role for government here, especially when national security is involved. The question is how that role is applied.

Policies that focus on restricting access to tools tend to miss how widely distributed these capabilities already are. They also make it harder for trusted security teams to operate effectively. Over time, that can reduce visibility into how these technologies are being used, which makes risk harder to manage.

A more effective approach starts with misuse. The priority should be preventing harmful applications of these capabilities while maintaining access for the teams responsible for defending organisations every day.

That means targeting bad actors and specific use cases rather than applying blanket restrictions. It means allowing security teams to continue using AI in controlled, observable environments where activity can be monitored and improved over time. And it means recognising that removing access in one place does not eliminate the underlying capability.

There is also a broader shift underway in how advantage is created in cybersecurity.

Access to a model alone is not what changes outcomes. What matters is how that capability is applied in practice. Organisations that are seeing results are the ones operationalising AI inside integrated security platforms, where insights are continuous and action can be taken quickly. They combine machine-scale analysis with human judgment to make better decisions under pressure.

That is what allows teams to keep up with a threat landscape that is already moving at machine speed. AI is now part of both sides of cybersecurity. Attackers are incorporating it into how they operate. Defenders are using it to close gaps and manage complexity.

The key question is not whether these tools carry risk. They do. The question is whether defenders are able to use them effectively enough to keep pace. If that access is constrained in ways that slow down security operations, the outcome will show up where it matters most: in longer response times, increased exposure, and higher overall risk.

Disclaimer:

This blog is provided for informational purposes only. It reflects general industry perspectives and practices and is not intended to represent a guarantee, assurance, or measure of performance. Actual results, outcomes, and capabilities vary by organisation, environment, and implementation.

This blog reflects the author’s views as of the publication date and contains forward-looking statements and opinions about technology trends. Actual outcomes may differ based on attacker behavior, customer environments, and broader market and regulatory developments.