This is not a security problem — Anthropic’s Mythos, GlassWing and how the industry must move forward

The author argues that security guidance correctly prescribes engineering actions—maintaining inventories, decommissioning legacy services, and minimizing API exposure—but security teams lack the authority to implement them. The piece calls for dissolving the Engineering/Security silos and making engineering accountable for attack-surface reduction and API ownership.