Anthropic's Mythos bug-finder is heading into Cisco and IBM products
Customers get Mythos through the vendors' tools, not the model itself; version 5.2 also launched with lower token prices.
1
Stories per day · 30 days
9 RSS
Relatedgranite4authentication-bypass2denial-of-service2huggingface2ibm-mq2langflow2privilege-escalation2rce2speech2translation2advisory1ai-framework1anthropic1app-connect1aspera1aspera-faspex1atlassian1authorization-bypass1
39 stories, newest first · one card per story
Stories tagged #ibm
CISA adds IBM Aspera Faspex flaw to KEV (CVE-2026-123218)
An authenticated user can craft a message to bypass authorization and escalate privileges; action is due November 12.
Canadian advisory covers IBM MQ and Watson Speech flaws
CVE-2026-11724 allows arbitrary code execution in MQ file transfer; CVE-2026-17493 can cause a denial of service.
IBM patches critical Langflow flaws enabling authentication bypass and RCE
The patches fix four vulnerabilities in Langflow versions 1.0.0 to 1.12.8, including two critical ones rated 9.8 CVSS, and affect Hono framework upgrades.
IBM Discloses Critical Langflow Vulnerabilities for Remote Code Execution
Seven vulnerabilities in Langflow versions 1.0.0-1.12.8 fixed in 1.13.0, including unauthenticated RCE with CVSS 9.8.
IBM Granite Switch 4.1.1 framed as a software-style model update
The post gives no release notes, benchmarks, weights status, or availability details beyond the title.
Canadian Cyber Centre lists vulnerable IBM security and integration products
The October 26 alert names version ranges for App Connect, Guardium, Planning Analytics, QRadar, and Sterling Connect:Direct.
IBM CEO says open-weight models now suit cheap on-prem use
Krishna told investors open models cost about 10–25% of frontier tokens while scoring near 90% as effective for most tasks.
IBM releases Granite Speech 5.0 2B for transcription and translation
The captured page is a cookie notice, so size, languages, license, and availability are not confirmed beyond the title.
IBM announces Granite Speech 5.0 for speech tasks
The Hugging Face post title says the model transcribes, translates, and attributes speech more accurately and faster.
Canadian Cyber Centre flags flaws in several IBM products
Affected products include Concert through 3.0.0, MQ images and Operator, Connect:Direct, and IBM i 7.3–7.6; no CVEs are named.
Granite Switch 4.1: Chat, Decisions, and Speech from One Endpoint
IBM published Granite Switch 4.1, offering chat, decisions, and speech through a single endpoint.
IBM security advisory (AV26-1040)
Canadian Cyber Centre warns IBM WebSphere and Liberty face denial of service via CVE-2026-103499.
October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days
Microsoft's October Patch Tuesday fixes 1,407 CVEs, including an exploited Windows Shell Mark-of-the-Web bypass.
10
IBM Patches 22 Verify Access Flaws, Including Critical Remote Code Execution Bugs
IBM patched 22 Verify Access flaws, including two unauthenticated CVSS 9.8 remote code execution bugs.
4
Lightwell project filters out 400 Java library vulnerabilities
IBM and Red Hat's Lightwell says it found more than 400 new vulnerabilities in widely used Java libraries.
IBM security advisory (AV26-1022)
Canada's Cyber Centre says IBM DataPower Gateway and Langflow OSS need patches, including XSS CVE-2026-14990.
USN-8906-1: Linux kernel (IBM) vulnerabilities
Ubuntu patched IBM Linux kernel flaws, including a local Arm TLB issue tracked as CVE-2025-10263.
Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
IBM and Red Hat say Lightwell fixed more than 400 previously unknown Java library flaws without naming them.
4
[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
Researchers disclose StreamSets Transformer 3.17.0 auth fail-open and unsandboxed code execution as container root.
Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
SecurityWeek logged 39 cybersecurity mergers and acquisitions announced in September 2026.
13
Mu-DisCoCat: A Variational Pipeline for Compositional Generalization on Quantum Processors
Mu-DisCoCat uses variational quantum circuits to improve compositional generalization on noisy near-term quantum hardware.
IBM Patches Multiple Langflow OSS Flaws Including Two Critical RCE Vulnerabilities
IBM patched 25 Langflow OSS flaws, including two unauthenticated critical remote code execution bugs, in version 1.12.3.
IBM security advisory (AV26-997)
Canada’s Cyber Centre urges patches for IBM DataStage, Guardium, and IBM i, including CVE-2026-84414.