Tag Anthropic

Anthropic Introduces Mythos Upgrade for Cyber Partners and a ‘Safe’ Edition for Everyone Else

Anthropic Unveils New AI Models Amid Cybersecurity Concerns Anthropic has introduced two advanced AI models, Claude Fable 5 and Claude Mythos 5, emphasizing their enhanced capabilities compared to the previous Mythos Preview model that was selectively released in April. This initial rollout was limited, primarily due to apprehensions regarding the…

Read MoreAnthropic Introduces Mythos Upgrade for Cyber Partners and a ‘Safe’ Edition for Everyone Else

The Kill Chain Becomes Obsolete When Your AI Agent Becomes the Threat

In September 2025, Anthropic reported a significant incident in which a state-sponsored entity deployed an AI coding agent to orchestrate an autonomous cyber espionage campaign targeting 30 international organizations. This AI agent executed 80-90% of operational tasks independently, conducting reconnaissance, generating exploit code, and facilitating lateral movement at machine speed,…

Read MoreThe Kill Chain Becomes Obsolete When Your AI Agent Becomes the Threat

Claude Code Source Leaked Due to npm Packaging Error, Confirms Anthropic

Anthropic has recently come forward regarding an unintentional disclosure of internal code from its AI coding assistant, Claude Code, attributed to human error. This incident did not expose sensitive customer information or credentials, as confirmed by an Anthropic spokesperson in a statement published by CNBC News. The company clarified that…

Read MoreClaude Code Source Leaked Due to npm Packaging Error, Confirms Anthropic

Hackers Exploit CVE-2025-55182 to Compromise 766 Next.js Hosts and Steal Credentials

Large-Scale Credential Harvesting Operation Targets Vulnerable Next.js Applications A significant credential harvesting operation has been detected exploiting the React2Shell vulnerability, marking a serious threat to numerous organizations. This operation aims to steal sensitive information, including database credentials, SSH private keys, AWS secrets, shell command histories, Stripe API keys, and GitHub…

Read MoreHackers Exploit CVE-2025-55182 to Compromise 766 Next.js Hosts and Steal Credentials

The Rise of AI: Fueling a Competitive Race in Bug Hunting

Rising Challenges in the Bug Bounty Landscape: Trends and Implications Organizations across the tech landscape are grappling with the increasing threat posed by both nation-state and criminal actors, as highlighted by cybersecurity expert Hultquist. While nation-state concerns are indeed significant, it is criminal activity that comprises the majority of incidents…

Read MoreThe Rise of AI: Fueling a Competitive Race in Bug Hunting

Project Glasswing Demonstrates AI’s Ability to Identify Bugs—But Who Will Resolve Them?

Title: Anthropic’s Project Glasswing: A Game Changer in Vulnerability Discovery Last week, Anthropic unveiled Project Glasswing, an advanced AI model designed for identifying software vulnerabilities with unprecedented effectiveness. In response to its powerful capabilities, the company has made the unusual decision to delay the public release of the model, providing…

Read MoreProject Glasswing Demonstrates AI’s Ability to Identify Bugs—But Who Will Resolve Them?

A Hacker Group is Compromising Open Source Code on an Unmatched Scale

A recent software supply chain attack has underscored the growing prevalence of cyber threats, as hackers have successfully infiltrated legitimate software to embed malicious code. Often a rare occurrence, such incidents have become increasingly frequent, transforming once-trusted applications into potential vulnerabilities within victim networks. A particularly notorious group of cybercriminals,…

Read MoreA Hacker Group is Compromising Open Source Code on an Unmatched Scale