Bank of America Hires 1,000 Contractors to Patch AI-Found Flaws

Bank of America's decision to bring in 1,000 contractors to patch software flaws exposed by Anthropic's Mythos offers a rare glimpse into the actual cost of defending against artificial intelligence. The scale of the effort shows how a single AI tool can trigger a large, urgent remediation project at a major financial institution.

As AI systems grow more capable of identifying weaknesses in code, banks and other firms face mounting pressure to close those gaps quickly. The vulnerabilities surfaced by Mythos required a workforce large enough to address them at speed, turning a technical problem into a significant operational and financial undertaking.

While the full expense is unclear, the contractor count alone signals that AI-driven security threats carry real budget consequences. For an industry that already spends heavily on compliance and risk management, the need to counter AI-enabled vulnerability discovery adds another layer of cost.

The case also illustrates how AI is changing the balance between attackers and defenders. Tools that can uncover software flaws are valuable to security teams, yet they demand rapid, resource-intensive responses. Bank of America's experience may serve as an early example of what banks can expect as AI becomes more deeply embedded in both cyber offense and defense.