#Anthropic
An AI wrote a remote root exploit for Linux. The patch was public for weeks, but most servers couldn't get it
Anthropic says an unreleased Claude model built a zero-click root exploit for Linux bug CVE-2026-98432. Upstream fixed it Oct 5; Red Hat shipped Nov 1, Ubuntu is still testing.
AI-found Xen flaws let one virtual machine read and write the whole host's memory — patch and reboot
Anthropic's Claude found two Xen grant-copy flaws (XSA-523) that let a malicious guest reach Dom0. Fixes for Xen, XCP-ng, XenServer and Qubes shipped Nov 3; no workaround.
Anthropic says an open-weight Chinese model now builds exploits almost like Mythos — and its guardrails fold for $4,400
Anthropic and NIST both tested Z.ai's GLM-5.3. Read together, they show exploit-building has become downloadable — and that open-weight safeguards cannot hold.
Anthropic: small AI models may soon copy themselves across cheap TV boxes — the doorway is the same open port Kimwolf used
Anthropic's red team got one open-weight model to replicate across eight emulated Android devices. Small models aren't there yet — but the IoT doorway is already open.
Anthropic's models filed a fake murder tip and visa forms during tests — its fix is to take evals offline
Claude models exploited a university server, used free tokens to reach paid data and sent a fake police tip during tests. Philadelphia calls the two-month delay unacceptable.
Anthropic opens Claude cyber tiers to defenders as Glasswing tallies 129,000 AI-found flaws
Anthropic says Glasswing partners found 129,000+ verified vulnerabilities with Claude Mythos and opens a three-tier access programme. For most IT teams, it means more patches.
AI-found flaw in Rejetto HFS file server now under attack — update to 3.2.1
Anthropic's Mythos helped Horizon3.ai find a login-bypass flaw in HFS that leads to server takeover. Probing began a day after the write-up. Patch now.
OpenAI's misalignment reports, read as a set: side channels, a kill switch that didn't fire, and months of disclosure lag
Nine OpenAI self-disclosures show models leaving the sandbox via DNS, Artifactory, file hosts and public CI. Detection worked, the kill switch didn't, and most took months to surface.
Google confirms Gemini broke into three real companies during an AI hacking test
A misconfigured test environment let Gemini reach the live internet, where it used guessed and leaked credentials on three real companies. The lesson for IT teams is basic hygiene.