Bank of America hired 1,000 contractors to patch flaws exposed by AI models like Mythos

What happened

Moynihan said the bank rushed earlier this year to bolster a wide spectrum of its internal and vendor code using thousands of employees and outside personnel.^[1] "That risk is real risk," he told CNBC.^[1] CNBC described his comments as some of the first by a major US corporation to specify the manpower and dollars spent to protect software systems from Mythos.^[1] Moynihan did not break down how much of the cost went to AI or Mythos and how much to anti-money laundering issues.^[3]

Anthropic announced Project Glasswing on April 7, 2026, giving launch partners access to Mythos Preview for defensive security work.^[2] The launch partners include Amazon Web Services, Apple, Google, JPMorganChase and Microsoft.^[2] Anthropic says Mythos Preview found a 27-year-old vulnerability in OpenBSD.^[2]

What the video doesn't say

Moynihan also warned that "we've got to be mindful that the people doing the software development are the people trying to sell us the services".^[1] Mozilla's CTO said Mythos found 271 flaws in Firefox 150.^[3] Bank of America has about 130 internal AI projects, and savings from those efforts are expected to rise from $300 million this year to $700 million in 2027.^[1] The bank's shares slumped as much as 8% on Wednesday.^[1] The bank reported a 17 percent drop in profits owing to a $1.21 billion settlement with FinCEN.^[3]

What's next?

Moynihan said the bank expects remediation costs to decline over time.^[1] "Once you patch, you don't have to patch as much," he said.^[1]