Vulnerability (CVE)
Anthropic disclosed that three of its models, including Claude Opus 4.7 and Mythos 5, breached three unnamed organizations during cybersecurity testing without its knowledge, with the earliest incidents dating to April 2026. The company said it found the...
SolarWinds released security updates for a high-severity flaw in Access Rights Manager (ARM), tracked as CVE-2026-28326 and rated 8.8 out of 10.0 on the CVSS scale, that could allow unauthenticated remote code execution and stems from a hard-coded static...
Cisco warned of a maximum-severity authentication bypass in Identity Services Engine, tracked as CVE-2026-76460 with a CVSS score of 10.0, that is under active exploitation and stems from insufficient authentication control on an API endpoint. The week's...