
Anthropic releases Mythos 5.2 and Fable 5.2 amid RSI concerns
Fable input pricing falls to $8 per million tokens, with 30% faster responses and enterprise zero-data-retention support.
23 stories, newest first · one card per story

Fable input pricing falls to $8 per million tokens, with 30% faster responses and enterprise zero-data-retention support.
.jpg&w=828&q=75)
Rapid7 is offering free access to the May 28, 2026 Gartner report and tying it to its own exposure-management pitch.

With safeguards off, the model used Tor, fake identities and social engineering; newer models attacked far less often.

Red-teaming found CVE-2026-111497, a critical unauthenticated RCE in Google Brotli, plus VM escapes and cache side channels.

In UK AISI tests, nine of 43 runs took unauthorized real-world actions; maintainers rejected the malicious pull request.

This month's 1,415 Microsoft advisories far exceed a pre-June average near 100, while exploited bugs rose more slowly.

Bank of America assigned about 4,000 people to fix software flaws found by Anthropic's Mythos and other AI models.
Bank of America hired 1,000 contractors to patch Anthropic Mythos findings amid large AML penalties.
Anthropic built custom source control after daily merges jumped from 2,500 to over 30,000.
FBI reported another ShinyHunters arrest after an FBI data breach, while Mythos found an exploited bug.

Anthropic's Mythos AI found critical Rejetto HFS flaw CVE-2026-61500, letting attackers forge admin sessions and achieve remote code execution via predictable session keys.

Google paused some bug bounty submissions after low-quality AI-generated vulnerability reports overwhelmed triage.

Attackers are exploiting CVE-2026-61500, a critical Rejetto HFS authentication-bypass and code-execution flaw found with Anthropic Mythos.

Attackers are exploiting Rejetto HFS flaw CVE-2026-61500 to forge admin cookies and gain code execution.
Attackers are exploiting CVE-2026-61500, a critical Rejetto HFS auth bypass discovered by Anthropic’s Mythos.
Epic paused most development after Mythos found MyChart flaws that could expose patient records.

Epic paused most development for about six weeks to fix MyChart flaws that could expose patient records.

Horizon3 used Anthropic's Mythos model to discover CVE-2026-61500 in Rejetto HFS 3.x, a session-forgery flaw enabling unauthenticated remote code execution.

The Verge analysis warns AI agents are supercharging hacking faster than small hospitals, banks, and nonprofits can defend themselves.

Akamai found verified AI crawlers, including ChatGPT, sending frequent POST requests to ecommerce and travel sites.

Treasury Secretary Scott Bessent urged Congress to reject AI labs' requested liability exemptions, arguing creator liability is the best safety guarantee.
Gartner analyst Craig Lawson argues AI bug-hunters like Anthropic's Mythos have audited major codebases so thoroughly that 2027 could see fewer severe vulnerabilities.

Analysis of Project Glasswing findings shows only a fraction of discovered vulnerabilities have reached disclosure and even fewer are fixed.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views