A large-scale malware distribution campaign on GitHub has been identified, involving 10,000 repositories that distribute Trojan malware. These repositories originate from different contributors and share a common pattern, enabling the creation of a script to find them.

Nicholas Carlini, an Anthropic researcher, demonstrated the vulnerability of systems to new AI models, raising concerns among cybersecurity experts. The Trump administration has expressed anxiety over the potential risks posed by Anthropic's next-generation AI software to global cybersecurity.

FIFA operates a public portal called the FIFA Agent Platform for registering licensed football agents. Users can register by submitting their ID and verifying their email.

NEW: malware developers added nuclear & biological weapons text to to their spyware. Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner. Cleanest practical example I can think of for why over-indexing on first order

Anthropic's Fable, a public version of its cybersecurity model Mythos, imposes strict guardrails that restrict requests related to cybersecurity topics. Researchers, including IBM's Valentina Palmiotti, have criticized these limitations for preventing even benign tasks, such as reading blog posts.

The US National Security Agency is utilizing Anthropic’s Mythos for conducting cyber attacks. Mythos is an AI tool designed to enhance capabilities in cybersecurity operations.

The 2026 U.S. Midterms face significant cyber threats primarily from disinformation campaigns rather than direct attacks on voting machines. Voter influence operations are increasingly manipulating the information environment through misleading narratives and fake content on social media and search engines.

Microsoft's GitHub has banned security researcher Nightmare-Eclipse after they posted zero-day Windows exploits. The researcher claims this action has ruined their life and has promised further retaliation against the company.

macOS Tahoe 26.5 includes security updates that address vulnerabilities affecting the operating system. These updates enhance system security and protect user data from potential threats.

CVE-2024-YIKES outlines a series of vulnerabilities that led to significant security incidents. The report details the technical specifics of the vulnerabilities and their impact on affected systems.