What happened
Anthropic disclosed that its Claude Mythos Preview model assisted researchers in deriving a complete key-recovery attack against HAWK-256, a post-quantum lattice-based signature scheme, by exploiting a previously overlooked symmetry in the underlying lattice structure. The same research produced a 200- to 800-fold performance improvement on an existing attack targeting seven-round AES-128. A reference implementation runs the end-to-end HAWK attack in roughly three hours and 42 minutes on a 96-core server. Separately, LG Electronics USA announced it will suspend smart TV apps on its webOS platform that secretly enroll users' televisions as residential proxy nodes, following researcher findings that more than 42 percent of apps in the store were routing third-party traffic through consumer devices without meaningful disclosure.
Why it matters for your business
The HAWK-256 result is a direct warning to security teams beginning post-quantum migration planning: algorithms that passed initial scrutiny can still harbor structural weaknesses that AI-assisted analysis can surface quickly. Organizations evaluating lattice-based cryptographic alternatives should pressure-test vendor claims against active research rather than treating NIST process inclusion as a final seal of approval. The LG proxy finding is equally operational: enterprise networks where employees connect personal smart TVs through corporate VPNs or home-office setups could inadvertently expose internal traffic metadata to unknown third-party proxy operators. Reviewing acceptable-use and endpoint policies to account for internet-connected appliances is now a practical necessity.
What to watch next
Anthropic's public release of the HAWK attack implementation will likely accelerate independent replication attempts and prompt the scheme's maintainers to issue patches or deprecation guidance, so a response from the HAWK project team is imminent. On the consumer device front, LG's enforcement posture will be tested by how quickly removed apps reappear under different names, and whether other smart TV platform operators — Samsung, Roku, Google TV — face similar scrutiny from researchers. Broader regulatory pressure on app store operators to audit for covert proxy and data-harvesting behavior is also likely to intensify.