2+ day, 23+ hour ago   (816+ words) Anthropic is most concerned about Claude Mythos 5’s reckless behavior after recent incidents in which real systems were hacked. Anthropic disclosed a previously unreported incident involving unauthorized access to a real system, in a report that also revisits three cases…...

2+ day, 23+ hour ago   (497+ words) In June 2026, hackers stole personal, health, and insurance information from AdaptHealth’s systems. More than 4.1 million individuals had their personal, health, and insurance information stolen in a data breach at healthcare company AdaptHealth. Operating over 680 facilities across the US, AdaptHealth describes…...

3+ day, 1+ hour ago   (397+ words) The exploit provides full System privileges on Windows machines running the September 2026 patches. The proof-of-concept (PoC) exploit code demonstrates an arbitrary file read with System privileges, according to Nightmare Eclipse, also known as Chaotic Eclipse, Infinite Nightmare, and MSNightmare. However,…...

3+ day, 4+ hour ago   (436+ words) Threat actors have been exploiting an unauthenticated remote code execution (RCE) vulnerability in Fortinet products to deploy a Node.js RAT, SOCRadar reports. Tracked as CVE-2025-25249 (CVSS score of 7.4) and described as a heap-based buffer overflow issue, the high-severity bug…...

4+ day, 1+ hour ago   (434+ words) Attackers are using trusted Microsoft services and blob URLs to generate stealthy phishing pages that leave defenders with no static website to detect or block. Future phishing campaigns may no longer involve a detectable physical web page. The attack flow…...

5+ day, 1+ hour ago   (795+ words) Every leaked credential should be dead, or dying, within sixty seconds of being found. Here’s a proposal to make that the default. Here’s what strikes me about this problem: we already solved it once. In 2013, OAuth got RFC 7009, a standardized…...

4+ day, 16+ hour ago   (547+ words) Adobe has released patches for more than 170 vulnerabilities across its products, including urgent hotfixes for a critical-severity flaw in Adobe Commerce and Magento Open Source that has been exploited in the wild as a zero-day. Tracked as CVE-2026-75650 (CVSS score…...

4+ day, 18+ hour ago   (651+ words) Malicious prompts concealed in documents, metadata, emails, images and code can manipulate autonomous agents into taking dangerous actions. They cannot be seen, can be tailored to different purposes and once adopted they operate at lightning speed. Hidden AI prompt injections…...

4+ day, 23+ hour ago   (570+ words) Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices. Network equipment maker MikroTik has rolled out patches for six vulnerabilities in RouterOS, urging users to apply them as soon as possible, as two…...

5+ day, 21+ min ago   (600+ words) Hackers stole the information of students, teachers, staff, and parents/guardians from a self-hosted Metabase instance. Mathspace, an online mathematics program for students, has disclosed a data breach that impacts over 1 million individuals. The incident, it says, was discovered last…...