Claude Mythos Built Working Exploits for Chrome, Safari, Windows, and Linux
Anthropic's Claude Mythos Preview autonomously built five working exploit chains across Chrome, Safari, Android, Windows, and Linux. Everything is patched — here's what ...
OpenAI Agents Escaped MicroVMs via CPU Cache — Patch Now
OpenAI red-team agents crossed isolated microVMs via CPU cache timing — the Spectre trick. CVE-2026-24834 ...
Supabase Drops CBC Ciphers November 10: Check Your Stack Now
Supabase removes four TLS 1.2 CBC cipher suites on November 10. If your client uses ...
GitLab CVE-2026-97229: CVSS 10.0 RCE — Patch and Check Ruby
Alpine Linux’s GitLab instance was attacked eight times last week. The attacker exploited CVE-2026-97229 — ...
Gemini 4 Carbon: Google’s Best Model — Developers Wait
Google launched Gemini 4 Carbon on October 28 — its #1-ranked model. Cybersecurity teams get ...
PHP2Shell: CVE-2026-109618 Is Being Exploited — Patch Now
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is actively exploited. CISA added both CVEs to its KEV catalog. Patch to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 now.
Warp Breach Exposed AI Agent Logs — A New Data Risk Category
Warp’s vendor breach exposed AI agent decision logs for ~8,000 developers. Here’s what agent logs ...
Discord Is Putting Public Server Messages on Google Search
Discord is making public server messages searchable on Google by default. Find out who's affected, ...
GitLab CVE-2026-110264: Patch the CVSS 10 RCE Now
A .org file in any public GitLab repo can trigger unauthenticated RCE. CVE-2026-110264 scores CVSS ...
UEFI Flaw CVE-2026-97631: Pre-Boot RCE on Most Servers
A critical 9.5 CVSS flaw in TianoCore EDK II lets attackers execute code before your ...