Anthropic's Mythos AI outsmarted Apple's Mac security systems
…Anthropic's engineers have warned that it is too good at finding security exploits to allow it into the wild. Now, proof of its abilities has come in the form of…
Search
All sources
bleepingcomputer.com
42
theregister.com
15
theverge.com
9
tomshardware.com
8
pcworld.com
7
hothardware.com
6
notebookcheck.net
6
arstechnica.com
5
extremetech.com
3
androidauthority.com
3
appleinsider.com
2
anthropic.com
2
Videos
More videosTop stories
First Apple M5 memory exploit discovered using Anthropic AI, gives root access on MacOS — Claude Mythos helps security researchers bypass Memory Integrity Enforcement
…The data center interconnection of tomorrow The researchers tested their code on an Apple M5 machine and macOS 26.4.1. The exploit chain impressively sneaks past MIE, a security feature present…
CISA flags two-year-old Oracle flaw as actively exploited in attacks
…flagging it as actively exploited in the wild. More recently, in March, Oracle released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability (CVE-2026-21992…
Microsoft's March 2026 update fixes 80+ security vulnerabilities
…The other RCE vulnerabilities in Excel can't be exploited via the preview window, nor can the two RCE vulnerabilities in SharePoint. Windows security fixes A large number of the vulnerabilities—48…
Discussions and forums
Ask HN: Are advances in AI going to push Linux to a micro-kernel?
This is something that has been bouncing around my head for the past couple weeks with the flood of security related news around Mythos and the number of 0days being found.Microkernels, unikernals, hardware-enforced capa…
4
9
Tell HN: Compliance is not equal to Security
For over a decade, I’ve been doing bug bounty, security audits, and security consulting. And if there’s one thing I’ve seen repeatedly, it’s this:Most startups call a security engineer or hire a security agency only when…
1
1
The compression of the exploit timeline: Why n-day gaps and 90-day embargoes are failing in practice.
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Show HN: HoneyLabs – Public honeypot threat Intel feed and MCP server
I've been running a small fleet of honeypots for about a year. They get hit by a mix of research scanners (Censys, Shadowserver, etc.), old worms, and a bump of CVE probes the day a new Nuclei template ships. The data wa…
4
2
CISA orders feds to patch actively exploited Drupal vulnerability
…Successful exploitation can potentially lead to information disclosure, privilege escalation, and even remote code execution. The Drupal security team tagged the flaw as "highly critical" before releasing patches and confirming that exploitation…
Partnering with Mozilla to improve Firefox’s security
…Opus 4.6 is currently far better at identifying and fixing vulnerabilities than at exploiting them. This gives defenders the advantage. And with the recent release of Claude Code Security in limited…
Security researchers, aided by Anthropic's Mythos, claim to have breached macOS - Engadget
…OpenAI's Daybreak uses its various AI models, including its specialized security agent Codex. It was designed around the premise that cyber defense should be built into software from the beginning and…
CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers
…Hackers now exploit SolarWinds Serv-U flaw to crash servers By Sergiu Gatlan June 5, 2026 03:15 PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today that hackers…
Ransomware crims abused Cisco 0-day weeks before disclosure
Security Ransomware crims abused Cisco 0-day weeks before disclosure, says Amazon security boss Interlock's post-exploit toolkit exposed Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco…
Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws
…Veeam released security updates for a critical Backup & Replication security flaw that can be exploited to gain remote code execution (RCE) on domain-joined backup servers. The June 2026 Patch Tuesday Security…