Anthropic Launches Claude Fable 5 and Mythos 5: Dual AI Models with Cyber Safeguards
On June 9, Anthropic released Claude Fable 5, its most capable AI model, alongside a restricted version, Claude Mythos 5, designed for…
Tag: CVE-2026-11645
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs Ravie LakshmananJun 10, 2026Vulnerability / Zero-Day Microsoft on Tuesday released…
Automated Pentest Gaps: What Your Report Misses and How to Fix It
Automated penetration testing is a staple of security validation, but a clean report may create a false sense of security. This article,…
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following reports…
Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE
A high-severity path traversal vulnerability in Langflow, designated CVE-2026-5027 (CVSS 8.8), is being actively exploited in the wild. Discovered by Tenable, the…
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Ivanti, Fortinet, and SAP have released security patches addressing multiple critical vulnerabilities that could lead to arbitrary code execution and information disclosure.Fortinet…
China-Linked JDY Botnet Expands to Over 1,500 Devices for Cyber Reconnaissance
Cybersecurity researchers at Lumen's Black Lotus Labs have identified a significant expansion of the JDY botnet, a covert network linked to China-nexus…
GitHub to Disable npm Install Scripts by Default to Combat Supply Chain Attacks
GitHub has announced significant security changes for npm version 12, set to release next month, aimed at mitigating software supply chain attacks.…
OceanLotus Targets Vietnam Investors With SPECTRALVIPER in FireAnt Supply Chain Attack
ESET has uncovered two campaigns by the Vietnam-aligned threat actor OceanLotus (APT32) targeting domestic entities and stock investors with the SPECTRALVIPER backdoor.…
AI Broke Vulnerability Management: Why CISOs Are Moving Budget to Breach and Attack Simulation
For thirty years, vulnerability management relied on a buffer between discovery and weaponization. AI has collapsed that buffer, compressing time-to-exploit from months…