Bank of America Hired 1,000 Contractors to Patch Flaws Exposed by Mythos

Bank of America brought in 1,000 contractors to patch software vulnerabilities uncovered by Mythos, according to CNBC. The disclosure highlights how the emergence of advanced AI models capable of surfacing security weaknesses is forcing large financial institutions into large-scale remediation efforts.

The scale of the contractor deployment underscores the volume of flaws the tool identified across the bank's systems. Rather than relying solely on internal engineering teams, Bank of America turned to outside contractors to work through the backlog of fixes, a sign that the discovery of vulnerabilities can outpace the capacity of existing staff to address them.

The episode points to a broader shift in how AI is being used in cybersecurity. Models like Mythos are designed to probe software for weaknesses, effectively giving defenders a faster way to find flaws before attackers do — but also generating a workload that must be triaged and repaired. For a bank of Bank of America's size, that means coordinating a large, temporary workforce alongside permanent security and technology staff.

For investors, the development is a reminder that the adoption of frontier AI tools carries operational costs beyond licensing and compute. Remediation at this scale requires budget, project management and oversight, and it can divert resources from other technology initiatives. It also raises questions about how financial firms will manage the recurring cycle of discovery and patching as AI models grow more capable.

The report did not disclose the cost of the contractor effort or the number of vulnerabilities addressed.