🔥 Anthropic says its #Claude model found 22 Firefox vulnerabilities while scanning ~6,000 C++ files with Mozilla.

14 were high-severity. Turning bugs into exploits proved harder: after hundreds of attempts, the AI succeeded only twice.

🔗 Read → https://thehackernews.com/2026/03/anthropic-finds-22-firefox.html

⚡ ThreatsDay Bulletin (May 28, 2026) – Security teams, here are the 17 key updates you need today.

Key updates:
• Anthropic launches #Claude code security plugin
• Kali365 kit bypasses Microsoft 365 MFA
• 1,300+ malicious C2 servers found in Middle East
• FIFA World Cup 2026 scam surge begins
• #Microsoft patches Azure AKS priv-esc flaw
• Silent Ransom Group impersonates IT support
• GhostTree bypasses Windows security tools
• CISA adds DAEMON Tools to KEV catalog

Plus 9 more: Apple post-quantum crypto release, WaSteal #WhatsApp stealer extensions, fake GitHub installers, and phishing campaigns.

Full bulletin here: https://thehackernews.com/2026/05/threatsday-bulletin-claude-security.html

🎮 Tell an AI browser it’s just playing a game.

Researchers say "BioShocking" tricked six AI agents, including #ChatGPT Atlas, Comet, and #Claude, into copying GitHub SSH credentials from a signed-in session.

Read how the attack chain worked: https://thehackernews.com/2026/06/new-bioshocking-attack-tricks-ai.html

🔥 Anthropic is putting #Claude Fable 5 back online worldwide.

The U.S. lifted June 12 export controls tied to an Amazon-reported jailbreak that surfaced vulnerability-finding and exploit-code behavior.

Fable 5 returns July 1 across Claude platforms.

#Anthropic says its new classifier blocks the method in 99%+ of tries.

Read: https://thehackernews.com/2026/07/anthropic-restores-claude-fable-5-after.html

🚨 Your developers’ AI coding assistants are tripping endpoint alarms built to catch intruders.

Sophos says #Claude Code, Cursor, and OpenAI Codex triggered rules for DPAPI browser credential access, cmdkey /list, certutil-to-bitsadmin downloads, and startup-folder writes.

Read the full story: https://thehackernews.com/2026/07/ai-coding-agents-found-triggering.html

🚨 GhostApproval </>

A malicious repo can trick AI coding assistants into reading or writing files outside the workspace.

Wiz says symlink flaws affected Amazon Q Developer, #Claude Code, Augment, Cursor, #Google Antigravity, and Windsurf.

Learn how this attack works on THN 🠖 https://thehackernews.com/2026/07/ghostapproval-symlink-flaws-could-let.html

‼️ Nobody asked #Claude to cancel another gym member's booking.

Aikido rebuilt the Australian gym app and tested Opus 4.6 on #OpenClaw. The model bypassed its browser-only 7-day booking limit in 9 of 10 runs.

In two runs, it also canceled another member’s reservation.

Read: https://thehackernews.com/2026/08/claude-opus-46-bypasses-gym-booking.html