#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage
Anthropic takes Fable 5 and Mythos 5 offline to comply with a directive from the Trump administration to prevent use by foreign nationals.
By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed.
The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.
The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs.
The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.
An AI hacker claims to have achieved a prompt-based jailbreak shortly after Fable 5’s launch, but Anthropic says it’s not a real jailbreak.
Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation.
Oracle has released a patch for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.
The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries.
A PowerShell script included in patch files appears to be triggering false positives by multiple security engines.
Disclosed in March, the security defect enables unauthenticated attackers to write files to arbitrary locations on the system.
The 13 websites purported to be affiliated with consulting companies that advertised job openings for current and former holders of security clearances
The security defects could allow attackers to create or modify arbitrary files and access and modify protected resources.