vendors/anthropic.htmlSecurity news, advisories and CVEs for AnthropicMon, 19 Oct 2026 12:28:44 GMT https://www.securityweek.com/anthropic-acquires-confidential-ai-startup-opaque-systems/13j4yuoMon, 19 Oct 2026 07:45:25 GMTSecurityWeek. Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware.AI https://thehackernews.com/2026/10/opencode-console-breach-may-have.htmlynfx3xMon, 19 Oct 2026 06:07:08 GMTThe Hacker News. An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode's optional hosted service: a workspace saves its…Breach https://cybersecuritynews.com/claude-ai-cryptography-mystery/1i0ng79Sat, 17 Oct 2026 16:59:29 GMTCybersecurity News. Anthropic says an internal Claude research model has traced the origins of five NSA-supplied elliptic curve seeds in under 30 minutes, answering a cryptography question that remained open for roughly 25 years. The finding explains how important public…AI https://news.google.com/rss/articles/CBMibkFVX3lxTE1vRXkwNFZTczhoSDNuMGVzS29SS1FJeVZrZTBPaEdYeFN0cHF3S2plX29YSkJib2hlLTBkN3g5UE92UTR5VlhVVzY0Qm5pSm8ybGstSk1PNUExTWJjaVZEdGNNZF83b1FQZHEzYzhn0gFzQVVfeXFMTnFaVnlzcVZGbEpfSWljV1l4eXFHS3B5WGdWZXk2STZrREpyekRVdjZkVm00MmZ5WENPbVBReVh3V0x3WEhZcVd5Q2YzSDV6b0xKYlZTcmpIYWFMX1djOURSZFNjYnNVRjVEZkR5TlEweGJOWQ?oc=56ch0k8Sat, 17 Oct 2026 16:59:29 GMTCybersecurity News. Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes CyberSecurityNewsAI https://cybersecuritynews.com/google-fixes-10-chrome-vulnerabilities/1xxf6i4Sat, 17 Oct 2026 05:29:38 GMTCybersecurity News. Google released a Chrome Stable security update fixing 10 vulnerabilities across Windows, Mac, and Linux, including a high-severity DOM memory corruption flaw reported by Xinyang Ge of Anthropic with Claude AI. The update also addresses one critical, six…VulnerabilityAI https://www.darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risknljallFri, 16 Oct 2026 19:49:30 GMTDark Reading. Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.AI https://cybersecuritynews.com/new-aoki-malware/13qi31eFri, 16 Oct 2026 10:22:47 GMTCybersecurity News. Aoki, also known as Aokigahara, is a data-stealing malware that has added credentials for AI tools to its growing list of targets. Recent versions seek local files and session data linked to ChatGPT, Claude, OpenAI Codex, Cursor, Codeium and Gemini. The…MalwareAI https://cybersecuritynews.com/midnight-blizzard-linked-hackers/45bx6aFri, 16 Oct 2026 07:23:31 GMTCybersecurity News. Hackers linked to Midnight Blizzard used Anthropic’s Claude AI to rebuild malware after security tools detected it, helping them keep espionage operations running against Ukrainian and European targets. New research shows that changing a file’s code and hash…APTMalwareAI https://cybersecuritynews.com/linus-torvalds-use-claude-code-patches/dwa8zaFri, 16 Oct 2026 04:07:53 GMTCybersecurity News. Linus Torvalds has disclosed that Claude Code helped write Linux kernel patches, test programs, review material, and the first draft of a technical write-up under his direction. The work targets page-cache read performance, showing how AI coding tools are…VulnerabilityAI https://socket.dev/blog/anthropic-oss-scanner1fwn00gThu, 15 Oct 2026 14:13:04 GMTSocket. Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.ResearchVulnerability https://news.google.com/rss/articles/CBMiZ0FVX3lxTE5nWFlHbURpYkV1SW5tZmh2R1RWNHpBMXBvSnVESzdwWW0tTVZsYzdCcjRGRVpLRGRsQWRKc3ZGNEFONzYtQ3ZpSG5PNnIzeFRERlhkRFVVSDdKVEs1WllkQTdDLXYyVXfSAWxBVV95cUxQWGVzOVEwUk9sa29wVzNsWFpuQzdJTkJJZFkta3MySEJLdlptMVZrTU1SSF82TlVDM2o5M05Vblk1WXVHQXZuYXZzaUhRbk9nQU1wRHN0aVJnek1pSjluSUQyTkVISU5DSlR1cFk?oc=5cbqeblThu, 15 Oct 2026 09:30:04 GMTCybersecurity News. Anthropic Warns AI Agents Can Now Automate the Entire Cyber Kill Chain CyberSecurityNewsAI https://cybersecuritynews.com/anthropic-warns-ai-agents/1q5tjwxThu, 15 Oct 2026 09:27:18 GMTCybersecurity News. Anthropic has warned that attackers use AI agents to automate every stage of a cyberattack, from finding targets and stealing credentials to moving through networks and exfiltrating data. Its September 2026 threat report describes campaigns in which Claude…AI https://www.darkreading.com/threat-intelligence/new-anthropic-sneakpeek-silent-zero-click-threat1y3lgd6Wed, 14 Oct 2026 20:09:42 GMTDark Reading. A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.Vulnerability https://www.theverge.com/ai-artificial-intelligence/1011108/anthropic-self-replicating-ai-smart-devices-risk1sc22drWed, 14 Oct 2026 15:19:02 GMTThe Verge. Are legions of smart devices - fridges, ovens, vacuum cleaners, lawnmowers, security cameras, and TVs - conspiring to take over the internet? No. But they could soon be unwitting hosts to self-replicating AI models that spread from device to device and prove…AI https://www.malwarebytes.com/blog/ai/2026/10/police-receive-fake-murder-tip-from-anthropics-claude-ai1sdabrWed, 14 Oct 2026 10:43:39 GMTMalwarebytes Labs. Anthropic’s Claude submitted a made-up tip about an unsolved murder during testing.ResearchAI https://www.bleepingcomputer.com/news/security/anthropic-warns-self-replicating-ai-could-spread-to-your-smart-devices/gqw3moTue, 13 Oct 2026 21:16:34 GMTBleepingComputer (+1 more sources). Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers. [...]AIResearchVulnerability https://www.darkreading.com/perimeter/anthropic-ingredients-future-ai-worms181jhrmTue, 13 Oct 2026 20:35:23 GMTDark Reading. Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.AI https://www.theregister.com/security/2026/10/13/claude-submitted-fake-murder-tip-to-philly-police-during-summertime-testing/5302842104526pTue, 13 Oct 2026 17:18:00 GMTThe Register. Anthropic took more than two months to alert copsAI https://news.google.com/rss/articles/CBMif0FVX3lxTFBSZXA4Z3JQNTJlb05qcUhVa3hrM3RwMzRTT1FqY2NWRVV2Y2pBQUVwOFgtUEcyTlNlSlhUMGZQaXppRVk0TEU2SHdra3ZFOGxKSzhGSlVDbXIzTjZEZEs1NUVBaVJWUGNKTVdsbTE1NDlEZThjYTlFYUtGT3Zfd0HSAYQBQVVfeXFMUFhJSVM0UElhZUoxV0Q5d0w0NkJ1cFBvUUpqMkstZkdYY3IzUVlNcXVoWHV3UnZFZDhWN0g0ampLMFQxN3UxSk9fU0VoYVgxWnlYVTZ2bUhjS3UyQWx1bkY1cUpXZ3hTZTBJV2RSN0ZUck1WS2twUTIwLWk2OWpMVFNDam43?oc=51xwln3aTue, 13 Oct 2026 16:51:57 GMTCybersecurity News. CrowdStrike Joins Anthropic Defense Program to Advance AI-powered Defense for Critical Infrastructure CyberSecurityNewsAI https://cybersecuritynews.com/crowdstrike-joins-anthropic-defense-program/1avdiotTue, 13 Oct 2026 16:49:50 GMTCybersecurity News. CrowdStrike has joined Anthropic’s Critical Infrastructure Defense Program to help strengthen AI-powered cybersecurity across energy, water, manufacturing, and transportation systems. Announced on October 8, 2026, the partnership combines CrowdStrike’s…AI https://www.theregister.com/ai-and-ml/2026/10/13/anthropic-conjures-another-threat-that-doesnt-exist-yet-to-stoke-fears-of-ai-apocalypse/53028661p126z5Tue, 13 Oct 2026 16:49:00 GMTThe Register. Self-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get smarterAI https://www.securityweek.com/small-ai-models-may-soon-be-able-to-self-replicate-on-iot-devices-anthropic-warns/hvpv4aTue, 13 Oct 2026 11:58:29 GMTSecurityWeek (+4 more sources). Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on their own.AIMalware https://www.bleepingcomputer.com/news/security/anthropic-takes-risky-ai-tests-offline-after-models-breach-govt-sites/1g7g4m2Mon, 12 Oct 2026 18:51:59 GMTBleepingComputer. Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels. [...]BreachAI https://thehackernews.com/2026/10/cyberxero-uses-claude-code-in-campaign.htmlm3zqvfMon, 12 Oct 2026 07:26:12 GMTThe Hacker News. Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings…AIMalware https://securityaffairs.com/200726/ai/anthropic-restricts-live-internet-access-after-claude-evaluation-failures.html1x4wuwySat, 10 Oct 2026 19:04:58 GMTSecurity Affairs. Anthropic’s models kept working around the rules on the live internet. The company published the cases. Anthropic released a report on unintended actions its Claude models took during evaluations and internal use. The cases involved real websites and real…AI https://www.bleepingcomputer.com/news/security/hacker-used-artex-ai-and-claude-agents-to-target-south-korean-banks/4bk0n4Sat, 10 Oct 2026 14:16:17 GMTBleepingComputer. The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX AI penetration testing suite and Claude agents. [...]AI https://databreaches.net/2026/10/10/anthropic-ai-agent-gives-fake-murder-tip-to-us-cops-in-global-breach/arcq82Sat, 10 Oct 2026 10:42:55 GMTDataBreaches.net. Georgia Wells and Joseph Pisani report: Rogue AI models have hacked companies and tried to break into government websites. Now one has submitted a fake tip for an unsolved crime. Police in Philadelphia say Anthropic alerted them this week that one of its…BreachAI https://thehackernews.com/2026/10/anthropic-cuts-live-internet-access-for.html12wsbudSat, 10 Oct 2026 09:18:45 GMTThe Hacker News. Anthropic on Friday said it's cutting off live internet access for all its internal evaluations until further notice following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real…VulnerabilityAI https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/vnpxu3Fri, 09 Oct 2026 20:31:37 GMTBleepingComputer. Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks. [...]AIMalware https://securityaffairs.com/200685/ai/claude-helps-secure-open-source-as-anthropic-offers-free-vulnerability-scanning.html1gu1cnxFri, 09 Oct 2026 13:56:30 GMTSecurity Affairs. Anthropic launches free OSS Scanner, using AI to find open-source vulnerabilities and help maintainers fix bugs before attackers exploit them. Anthropic is launching OSS Scanner, a vulnerability scanner for open-source code that costs nothing for projects to…VulnerabilityAI https://www.securityweek.com/anthropic-fast-tracks-ai-bug-reports-to-oss-maintainers-taps-11-firms-for-ot-security/sp1we4Fri, 09 Oct 2026 08:19:33 GMTSecurityWeek. OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.VulnerabilityAI https://www.theverge.com/ai-artificial-intelligence/1008521/anthropic-open-source-oss-scannerliniinThu, 08 Oct 2026 21:53:51 GMTThe Verge (+2 more sources). Anthropic's offering to help open-source projects track down security vulnerabilities with a new service called OSS Scanner. It says open-source projects that opt-in will get "thorough, periodic security scans by our strongest models at no cost." That could…VulnerabilitySupply chainAI https://cyberscoop.com/anthropic-cybersecurity-program-critical-infrastructure-open-source/8vw34oThu, 08 Oct 2026 21:32:40 GMTCyberScoop. The critical infrastructure defense program will seek to pair Claude models, Anthropic engineers and threat research with the expertise of cybersecurity companies. https://www.helpnetsecurity.com/2026/10/08/anthropic-claude-haiku-5-5/109lldThu, 08 Oct 2026 11:24:16 GMTHelp Net Security. Anthropic’s Claude Haiku 5.5 model, designed for quick, repetitive workloads and speed-sensitive tasks, is now better at finding vulnerabilities and writing exploits than its predecessor. The company has given it stricter cybersecurity safeguards than Haiku…Vulnerability https://news.google.com/rss/articles/CBMiekFVX3lxTE5aQlFGYTQwWEp6TkhTZnc2Q2hEQ2MyZGV6RkJNTWNwenVqYUxROVhtTjU5LXpxRXplYnlkZEFfbzllQldCQnZOWUJjS1ZEWDZSRTQyQzh3Q3F6VWw5MGY1anpCQWcxVm44QS1JUEVqYkdmdWZpeF8zREJB?oc=51689gceThu, 08 Oct 2026 11:24:16 GMTHelp Net Security. Anthropic’s new budget model gets much better at ignoring hidden commands Help Net Security https://www.crowdstrike.com/en-us/blog/crowdstrike-anthropic-critical-infrastructure-defense-program/1kyi4oThu, 08 Oct 2026 05:00:00 GMTCrowdStrike. ResearchAI https://www.darkreading.com/vulnerabilities-threats/anthropic-vetted-defenders-claude-guardrails1r2hrayWed, 07 Oct 2026 20:51:25 GMTDark Reading. Anthropic has merged Project Glasswing into a tiered access program for its advanced cyber LLMs, including Opus, Sonnet, and Mythos.AI https://www.securityweek.com/anthropic-introduces-3-tier-cyber-verification-program-for-ai-access/1mrspggWed, 07 Oct 2026 10:07:09 GMTSecurityWeek. Anthropic is integrating the CVP and Project Glasswing into a single offering, with three levels of access to its most capable AI models.AI https://securityaffairs.com/200521/ai/anthropic-creates-three-tiers-for-claude-cyber-access.html1k8mk2xWed, 07 Oct 2026 10:06:28 GMTSecurity Affairs. Anthropic created three access tiers for Claude’s offensive security use, matching cyber capabilities and safeguards to the user’s level of trust. Anthropic is trying to solve the difficult balance between using AI for cybersecurity and preventing misuse. The…VulnerabilityAI https://www.helpnetsecurity.com/2026/10/07/anthropic-expands-cyber-verification-program/65us6xWed, 07 Oct 2026 09:00:20 GMTHelp Net Security. Anthropic expanded its Cyber Verification Program (CVP), giving approved security professionals access to advanced Claude capabilities with fewer automated blocks on work such as malware analysis and vulnerability testing. Three tiers for cybersecurity work…VulnerabilityAI https://thehackernews.com/2026/10/anthropic-expands-claude-access-for.htmltigynzWed, 07 Oct 2026 08:07:38 GMTThe Hacker News. Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing…VulnerabilityAI https://www.theregister.com/security/2026/10/07/anthropic-reconfigures-its-cool-kids-security-program/5301509rmoartTue, 06 Oct 2026 23:29:27 GMTThe Register. Company's Project Glasswing and Cyber Verification Program metamorphose into triple tier threat hunting club https://thehackernews.com/2026/10/fake-chatgpt-gemini-and-claude-ad.html1g513f3Tue, 06 Oct 2026 18:38:55 GMTThe Hacker News. Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.…AI https://securityaffairs.com/200444/ai/anthropic-mythos-found-a-bug-in-rejetto-hfs-attackers-are-now-exploiting-it.html1b79qq0Mon, 05 Oct 2026 18:15:12 GMTSecurity Affairs. AI-assisted research uncovered a critical Rejetto HFS flaw that enables authentication bypass and remote code execution, now exploited in the wild. A Rejetto HFS vulnerability, tracked as CVE-2026-61500 (CVSS score of 9.3), discovered with the help of the…VulnerabilityZero-day https://www.theregister.com/security/2026/10/03/anthropics-super-bug-hunting-model-mythos-is-hardcore-good-at-math-as-latest-vuln-under-attack-shows/53009334ua2bdSat, 03 Oct 2026 15:27:00 GMTThe Register. Exploitation attempts came from China-hosted IP, VulnCheck researcher saysVulnerabilityZero-day https://www.theregister.com/security/2026/10/01/suspected-chinese-spies-spoofed-an-anthropic-exec-ex-white-house-official-in-ai-phishing/5300595f1si9rThu, 01 Oct 2026 16:43:30 GMTThe Register. Your invite to a fake AI policy advisory committee has strings attachedVulnerabilityPhishingAI https://www.securityweek.com/ftc-is-investigating-openai-and-anthropic-over-possible-risks-to-consumers/k4quoeWed, 30 Sep 2026 23:43:51 GMTSecurityWeek. An FTC spokesperson confirmed the investigation but declined further comment. https://www.securityweek.com/anthropic-flags-ai-agent-liability-risks-as-openai-faces-hacking-lawsuit/1ji76c0Wed, 30 Sep 2026 11:19:00 GMTSecurityWeek. Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable for what agents do.AILaw & policy https://horizon3.ai/attack-research/disclosures/anthropic-mythos-rejetto-hfs-rce/w3xjbiWed, 30 Sep 2026 10:00:00 GMTHorizon3.ai. Horizon3 researchers used Anthropic’s Mythos to uncover a chain of cryptographic weaknesses in Rejetto HFS, recover a predictable signing key, forge an admin session, and achieve remote code execution.ResearchVulnerability https://www.schneier.com/blog/archives/2026/09/on-anthropics-ai-misuse-report.htmlr8hx7hFri, 25 Sep 2026 11:07:22 GMTSchneier on Security. Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized the report into 117 findings. A few of the highlights: AI agents increasingly handled reconnaissance, exploitation, data…VulnerabilityAI https://www.malwarebytes.com/blog/threat-intel/2026/09/fake-claude-max-giveaway-hides-a-google-account-phishing-trap1q90ztfWed, 23 Sep 2026 12:45:00 GMTMalwarebytes Labs. A convincing offer of a free Claude Max subscription uses a fake browser window to steal Google login information.ResearchPhishingAI https://www.theverge.com/ai-artificial-intelligence/998868/anthropic-claude-opus-5-5-cybersecurity18e1gz3Tue, 22 Sep 2026 16:30:00 GMTThe Verge. Anthropic says its new Claude Opus 5.5 model comes with stronger safeguards in the wake of recent rogue AI hacking incidents. In an announcement on Tuesday, Anthropic says Opus 5.5 comes with improvements to certain risky behaviors, including attempts to…AI https://www.theregister.com/security/2026/09/21/anthropic-linked-cves-pile-up-attackers-mostly-shrug/52980181w1ka1cMon, 21 Sep 2026 22:32:51 GMTThe Register. Of 225 flaws found by Glasswing and tracked by VulnCheck researcher, just one has confirmed exploitation in the wildVulnerabilityZero-day