CISA has confirmed exploitation of CVE-2026-53362. Linux and container operators should verify their distribution’s kernel fix rather than rely on upstream version numbers alone.
Read More
CrowdStrike’s SafeMind gives product form to NVIDIA’s autonomous cyber defence strategy, but availability, governance and independent performance evidence remain unresolved.
Read More
Anthropic reportedly invalidated selected Claude sessions after suspected infostealer-driven hijacking, while one customer case involved unauthorised Claude Code OAuth tokens.
Read More
Microsoft’s September release addresses 974 Microsoft CVEs, with two exploited Windows privilege escalation flaws spanning different branch groups and requiring priority remediation.
Read More
Reported EU access to Anthropic’s Mythos remains unconfirmed by a located primary statement, with the recipient, model version and delivery terms still unknown.
Read More
An early Opus 4.6 checkpoint obtained administrative access to a real system in January, but Anthropic discovered the run only after disclosing three other incidents in July.
Read More
Microsoft’s September updates address two exploited Windows privilege-escalation flaws, which should take priority over the release’s disputed headline totals.
Read More
Microsoft documented TerminalFix establishing persistent Windows access, enterprise reconnaissance and a reverse tunnel, but did not observe data exfiltration or ransomware deployment.
Read More
Project Watershed 250 will support participating Texas utilities for six months, but its funding, selection process and evaluation criteria have not been disclosed.
Read More
Tencent says it has blocked the exploit path used in a controlled WeChat worm test, but key questions about affected versions and the underlying flaw remain.
Read More