Security & Threat Intelligence · 04.08.2026, 20:54 UTC
Mythic 4 Public Beta: More Than a New Coat of Paint
| Schweregrad | info |
|---|---|
| Kategorie | Security & Threat Intelligence |
| Quelle | SpecterOps ↗ |
| Veröffentlicht | 04.08.2026 UTC |
Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.
TL;DR: Mythic 4 is now available on the Mythic-v4.0.0 branch and is entering a public beta for the next few months for the community to update their services. Mythic 4 has some breaking changes, new features, AI chat container support, and so much more.
Mythic 4 is entering a public beta for the next few months. This is a large update that adds generic operation chat, a new pluggable AI chat container, human-in-the-loop interactions for AI and eventing, operator aliases, inline task references, resumable file transfers, in-browser editing of files on agents, a more consistent user interface, and much more.
This major version update includes some breaking changes for almost all integrations, agents, and Mythic services. If you maintain one of those components, or just want to try the new operator workflows, I would love your feedback during the beta. I tried to keep breaking changes as minimal as possible, and for most things simply updating the corresponding Mythic container package is all you’ll need to do.
Mythic 4 Custom Dashboard
Why a Public Beta?
With the rise of AI in everything people are doing, more and more people are using AI to control Mythic. While Mythic’s GraphQL model provides a very high level of control, the Mythic 3 model of APITokens means that you’re giving an AI full control over a user or bot account. You can, of course, add command block lists to prevent certain commands, but you’re still giving the agent a large amount of control. Mythic 4 addresses this problem by providing fine grained API Token scopes so you can really limit what automation …