News that matters, without the noise.

Phishers Gain Persistence at EU, Asia Hospitality Orgs

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via

U.S. Lifts Export Controls on Claude Fable 5 and Mythos 5

The U.S. Department of Commerce has formally withdrawn export control restrictions on Anthropic’s Claude Fable 5 and Mythos

USN-8487-1: curl vulnerabilities

Andrew Nesbitt discovered that curl could reuse an existing live connection during STARTTLS-based connection upgrades even when the

Browser Security: Zero-Days Are Only Part of the Problem

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to learn

CVE-2026-9132

Medium Severity Description A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user

CVE-2026-9106

Medium Severity Description A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application

Anthropic to restore Claude Fable access on Wednesday

Anthropic has confirmed that the Department of Commerce has lifted export controls on Claude’s two most powerful models, Fable 5

DSA-6374-1 nginx – security update

https://security-tracker.debian.org/tracker/DSA-6374-1

Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price

Anthropic is now rolling out Sonnet 5, and it’s almost as good as the Opus range, but it

New BioShocking attack manipulates AI browser into data theft

A new prompt injection attack dubbed “BioShocking” could trick AI-powered browsers into treating real-world risky actions as part

Microsoft accelerates quantum-safe roadmap as risks grow

Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are bringing