Security Articles

141 min read

After Mythos: New Playbooks For a Zero-Window Era

AI models like Claude Mythos can discover vulnerabilities in minutes, making traditional patch windows nearly obsolete, requiring organizations to adopt an assume-breach security model.

11 min read

Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks

A Chinese hacker linked to state-sponsored cyberattacks on COVID-19 research was extradited from Italy to the U.S.

91 min read

Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

Microsoft patched a critical vulnerability in the Agent ID Administrator role within Entra ID that allowed privilege escalation and service principal takeover.

11 min read

Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202

Microsoft confirmed active exploitation of CVE-2026-32202, a high-severity Windows Shell spoofing vulnerability (CVSS 4.3) that allows unauthorized access to sensitive information.

OpenAI

41 min read

Our commitment to community safety

OpenAI describes its approach to protecting community safety in ChatGPT through multiple layers of protection.

Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack

Checkmarx disclosed GitHub repository data posted on dark web after March 2026 supply chain attack.

OpenAI

31 min read

OpenAI available at FedRAMP Moderate

OpenAI achieves FedRAMP Moderate authorization for secure AI deployment in U.S.

⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & More

This week's cybersecurity update covers critical malware threats, supply chain attacks, and active threat group campaigns.

31 min read

Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side

Anthropic's Claude Mythos AI dramatically accelerates vulnerability discovery, but most organizations lack the operational infrastructure to keep pace with remediation.

101 min read

PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

PhantomCore, a pro-Ukrainian hacktivist group, has been exploiting a chain of three TrueConf Server vulnerabilities (CVSS scores 7.5, 7.5, and 9.8) to breach Russian networks since September 2025.

11 min read

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

Researchers discovered 73 fake VS Code extensions linked to GlassWorm v2 malware campaign delivering information-stealing payloads.

21 min read