Anthropic Launches Claude Fable and Mythos 5.1 for Advanced Coding and Research

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has rolled out two new frontier AI models, Claude Fable 5.1 and Claude Mythos 5.1, positioning them as the most capable systems yet for software development, enterprise knowledge work, and scientific research. While both models share identical underlying architecture, …

OWASP Launches OASIS AI Initiative to Fix Open Source Vulnerabilities at Scale

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OWASP has launched the Open Automated Security Initiative for Software (OASIS), a global community effort designed to close the gap between finding vulnerabilities in open source code and actually fixing them. Announced on August 26, 2026, in San Francisco, the …

FBI Probes Service Selling 153M+ Drivers Licenses

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available …

Attackers Abuse Trusted Cloud Services to Hide Phishing Attacks Against Financial Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are increasingly weaponizing trusted cloud platforms such as Microsoft Azure, Google Firebase, Google Cloud Storage, Amazon Web Services, and Cloudflare to host phishing infrastructure aimed squarely at the financial sector, making malicious traffic nearly indistinguishable from legitimate business activity. …

Five Hackers Plead Guilty to ATM Jackpotting Attacks Using Malware to Dispense Cash

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Five Venezuelan nationals have pleaded guilty in a U.S. federal case involving attempted ATM jackpotting attacks. This criminal technique uses malware to force cash machines to dispense money without legitimate customer transactions. The case follows an FBI investigation into attempts …

Hackers Actively Exploiting Critical Langflow RCE and Rails Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two critical vulnerabilities affecting Langflow and Ruby on Rails deployments are being actively exploited, with attackers quickly moving from public disclosure to reconnaissance, secret harvesting, and potential remote code execution, according to VulnCheck telemetry. The first issue, tracked as CVE-2026-0768, …

Hackers Pose as Recruiters and Send Fake Coding Tests to Infect Software Developers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are posing as recruiters to turn routine job interviews into malware traps for software developers. Their latest campaign delivers two cross-platform remote access tools, NodeRabbit and PollCat, through coding challenges that look like genuine take-home tests. The activity has …

Hackers Weaponize Microsoft Teams Help Desk Calls for Malware and Network Lateral Movement

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers are turning Microsoft Teams help desk calls into an entry point for malware and network compromise. A campaign tracked as Spring Ring used external accounts that resembled internal IT support to chat with employees, then call them and press …

Boston Scientific Cyberattack Disrupts Medical Device Manufacturing and Global Operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Boston Scientific is investigating a cybersecurity incident that disrupted parts of its global operations, affecting manufacturing, order processing, and product shipments. The company said the incident was detected on August 25, 2026. It caused a network outage involving certain internal …

Hackers Pose as OpenAI, Anthropic and DeepSeek to Steal Credentials and Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are impersonating web crawlers from OpenAI, Anthropic, DeepSeek, and other major organizations to scan websites for exposed credentials and sensitive configuration files, targeting misconfigured servers that may leak cloud keys, API tokens, passwords, and private keys. GreyNoise observed …