Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models (LLMs) helped its engineers “complete otherwise-infeasible software migrations, designed three working electronic devices from scratch, solved two open problems in theRead More »Anthropic’s Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark

Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A), has been described as a use-after-free bug in the XML component. Use-after-free bugs typically occur when a programRead More »Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively tracked as Able2Shell. “As a precautionary measure, we are temporarily taking our Hosted N-central environment offline while we takeRead More »N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below – CVE-2026-123218 (CVSS score: 9.8) – An incorrect authorizationRead More »CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

There are three shifts in cybersecurity policy the country may see following the most recent midterm election. 

An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that Qubole’s platform uses to reach those customers. How the attacker got thoseRead More »Hackers Exploit Qubole’s Trusted AWS Access to Breach Customer Accounts and Steal Data

Attackers used the Ethersphere project’s own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. Both releases download and run code built to steal the wallet key that Swarm Desktop keeps for its node, along withRead More »Hackers Compromise Ethersphere’s bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

According to a report by Abnormal AI, 46% of security professionals say they are not at all effective at establishing what normal behavior looks like for AI agents.