The Edge of the Cyber World See the latest
Anthropic pushed out two new flagship models on September 1, 2026: Claude Fable 5.1 and Claude Mythos 5.1. The headline number is a 75% cut to cache-read pricing, but the more consequential story sits underneath it, in the compute buildout that makes a model like this possible in the first place. Anthropic says its run-rate…
The designation applies when a model can independently find and exploit zero-day vulnerabilities across many well-defended systems. The post OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold appeared first on SecurityWeek.
Eighty-five days ago, Anthropic pushed a button that crypto security teams had been dreading for months. On June 9, 2026, the company released Claude Fable 5, the public version of its internal Mythos model, to anyone with an API key. Within hours, crypto traders and security researchers were warning that a model this capable at…
SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall’s William Perry and Adam Babis, are listed below – CVE-2026-83548 (CVSS score: 10.0) – A pre-authentication SSRF vulnerability in the Appliance
Crypto markets are on edge again, and this time the trigger isn’t a hack that already happened. It’s a model that hasn’t fully shipped yet. Anthropic’s push toward a public release of Claude Fable, reported by Yellow.com and picked up by outlets including Axios, Intelligent Living, 36Kr and OfficeChai, has revived a debate that security…
Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the vulnerability details on August 31. GeoNetwork originated at the United Nations…
The National Vulnerability Database entered September 2026 carrying more than 27,000 unprocessed CVEs, a backlog that grew from roughly 13,000 in mid-2024, according to a June 2026 inspector general report from the US Commerce Department. In April 2026, NIST reclassified close to 29,000 of those backlogged entries as “Not Scheduled,” meaning they get no automatic…
Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997) that can allow attackers to remotely execute arbitrary code as
Forescout Research – Vedere Labs said it used Anthropic’s Claude to port a working pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another, executing attacker-supplied ARM shellcode on live hardware. The exploit targets CVE-2021-31886, a stack-based buffer overflow in the Nucleus FTP server’s handling of the USER command
The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution. The post SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks appeared first on SecurityWeek.
