Blog
-
CISA Uses Anthropic’s Mythos to Scan Federal Code for Security Vulnerabilities
The inside sources did not give much in the way of specifics as to which government agencies are being scanned by Mythos or exactly what work is being done. They did say that code repositories are being scanned and that a “large number” of security vulnerabilities have been uncovered.
-
Apple Shows Why Continuous Security Updates May Become the Norm in the AI Hacking Era
Between-version security updates have been relatively unusual for Apple until now, usually reserved for zero-days under active exploitation. Apple appears to be altering its usual practice of bundling security updates with new OS version rollouts in response to the looming threat of AI hacking.
-
France to Require Quantum-Safe Standards for ANSSI Cybersecurity Certification
Quantum-safe regulations and legislation are still relatively few and far between, but momentum has started to pick up. The latest development comes from France, which will require that products demonstrate adoption of quantum-era standards to receive the ANSSI cybersecurity certification.
-
FIFA World Cup Broadcasts Narrowly Avoid Disaster as Ethical Hacker Finds API Vulnerability
Some disappointed fans might well have tuned in to a black screen, or even worse some sort of disturbing substitute video, if an ethical hacker hadn’t been the first to find a critical API vulnerability in the FIFA World Cup digital control panels.
-
Will Autonomous AI Agents Require Digital IDs? Estonia Says It’s Already Time
Estonia appears to be the first and only ready to move on what may end up being a very important element: digital IDs for the autonomous AI agents that are becoming more and more common.
-
Agentjacking Attack Exposes Critical Trust Flaw in AI Coding Agents
The attack centers on forging error reports embedded with malicious instructions trusted implicitly by AI coding agents when sent by the Sentry MCP server. The trouble is, anyone can send an error report to a target with the Sentry DSN credential widely found out in the open.
-
New Copilot Vulnerability Bridges Old and New Data Theft Techniques
The scope of data theft is pretty severe once the Copilot vulnerability chain is successfully exploited, allowing the attacker to quickly rifle through a target’s Microsoft business environment for sensitive files.
-
Maine’s Data Breach Reporting Portal Under Review After Discord and VRChat Fakes Slip Through
Recent fake data breach reports for Discord and VRChat filed with the state of Maine have demonstrated that data breach reporting portals can instead become a source of fast-spreading disinformation if not managed properly.
-
Coupang Ecommerce Data Breach Fine Demonstrates the Increasing Level of Seriousness in South Korean Regulation
A record-setting fine of 624 billion won just handed down for ecommerce giant Coupang’s 2025 data breach demonstrates that South Korea’s privacy regulators continue to move in an even more strict direction.
-
Mythos AI Being Used in NSA Cyber Operations?
An anonymous source has come forward to claim that Anthropic now has engineers embedded with the NSA providing training and ongoing support to its cyber operations. The new Mythos AI, along with all other Anthropic products, are supposed to be under a ban for use by federal agencies and their contractors.