Search: infrastructure releases

Anthropic’s restricted Claude Mythos model may be coming to Claude Code

…The company also claimed its rollout poses a severe risk to global digital infrastructure. "The advantage will belong to the side that can get the most out of these tools," Anthropic warned…

May 25, 2026 · Mayank Parmar

The ‘Miasma’ worm source code briefly leaked on GitHub

…In each of those accounts, the threat actors leaked the source code in a repo named "Miasma-Open-Source-Release." This indicates that the threat actors deliberately released the source code, rather…

Jun 10, 2026 · Bill Toulas

ShapedPlugin update flow hacked to infect WordPress sites

…Also, releases hosted on WordPress.org were confirmed to be clean, suggesting that the attackers gained access to ShapedPlugin’s release infrastructure. WordPress is currently tracking the incident under CVE-2026-10735…

Jun 18, 2026 · Bill Toulas

Exploit available for new DirtyDecrypt Linux root escalation flaw

…This limits the attack surface to Linux distributions that closely follow the latest upstream kernel releases, including Fedora, Arch Linux, and openSUSE Tumbleweed. However, V12's proof-of-concept exploit has only…

May 18, 2026 · Sergiu Gatlan

Max severity Ivanti Sentry vulnerability now exploited in attacks

…Tracked as CVE-2026-10520 , the maximum-severity vulnerability stems from an OS command injection weakness and was patched by Ivanti on Tuesday with the release of Sentry versions R10.5.2…

Jun 11, 2026 · Sergiu Gatlan

Path traversal flaw in AI dev platform Langflow exploited in attacks

…Cybersecurity & Infrastructure Security Agency (CISA) also warned about active exploitation of CVE-2025-3248 , for which Condon says VulnCheck continues to observe activity, including activity linked to the Iranian threat group MuddyWater…

Jun 10, 2026 · Bill Toulas

Trend Micro warns of Apex One zero-day exploited in the wild

…Cybersecurity and Infrastructure Security Agency (CISA) also added CVE-2026-34926 to its list of actively exploited vulnerabilities and ordered federal agencies to patch their devices by June 4. "These types of…

May 22, 2026 · Sergiu Gatlan

New IronWorm malware hits 36 packages in npm supply-chain attack

…This opens the possibility that the new malware is an evolution of TeamPCP’s payload, since IronWorm appears to be "a custom, carefully built implant from an operation with its own infrastructure…

Jun 4, 2026 · Bill Toulas

Microsoft warns of Exchange zero-day flaw exploited in attacks

…In October, weeks after Exchange 2016 and 2019 reached the end of support , the Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) released guidance to help IT admins…

May 15, 2026 · Sergiu Gatlan

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

…Although the fix for the issue was released on February 19 in Ghost CMS version 6.19.1 , many sites failed to install the security update. SentinelOne published on February 27 details…

May 24, 2026 · Bill Toulas

Followed topics