Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself
An agent running Anthropic's Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real...
spent
When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted
The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break....
New warnings that Russian operatives are targeting the emails of US nuclear scientists and defense contractors
A group of Russian hackers has spent the last year targeting nuclear scientists, defense contractors, and government employees in a...
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
The security industry has spent two years debating whether open AI models are a risk. We think that is the...
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra's webmail client. The payload...
Mythos Didn’t Break Your Security Program. Your Exposure Window Could.
The industry spent the initial months after Anthropic's April 7 Mythos reveal focused on volume. How many new CVEs would...
Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity
Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting...
Anthropic’s Claude Tag aims to turn workplace AI from a personal assistant into a teammate
“For engineering teams, Claude Tag will help reduce time spent on debugging through fragmented Slack discussions, summarizing long incident threads,...
Hackers Spied on a Stock Exchange Executive’s Outlook Mailbox for Five Months
Swati KhandelwalJun 04, 2026Cyber Espionage / Malware Unknown attackers spent at least five months inside the Outlook mailbox of a...
Canvas attack aftermath: What risks come next
I’ve spent more than twenty‑five years in cybersecurity advising organizations on how to prepare for and respond to threats, including...
Canvas attack aftermath: What risks come next?
I’ve spent more than twenty‑five years in cybersecurity advising organizations on how to prepare for and respond to threats, including...
Smashing Security podcast #468: High-speed train hacks and homicidal lawnmowers
A 23-year-old radio enthusiast spent £300 on a piece of kit from the internet, and used it to bring four...
Smashing Security podcast #468: High-speed train hacks and homicidal lawnmowers
A 23-year-old radio enthusiast spent £300 on a piece of kit from the internet, and used it to bring four...
Smashing Security podcast #468: High-speed train hacks and homicidal lawnmowers
A 23-year-old radio enthusiast spent £300 on a piece of kit from the internet, and used it to bring four...
Smashing Security podcast #468: High-speed train hacks and homicidal lawnmowers
A 23-year-old radio enthusiast spent £300 on a piece of kit from the internet, and used it to bring four...
