Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests

Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.

·

Anthropic, Artificial Intelligence, Claude, Claude Mythos 5, Claude Opus 4.7, Cyber Attack, cybersecurity, Data Breaches, hacking, Hacking News, Hugging Face, Mythos, OpenAI, PyPI, Security, vulnerability

¶¶¶¶¶

Wordfence Finds Critical Backdoor in ARVE WordPress Plugin

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.

·

ARVE, backdoor, cybersecurity, Malware, Plugin, Security, vulnerability, Wordfence

¶¶¶¶¶

What an SSH Tunnel Actually Does and When You Should Use One

Learn how SSH tunnels securely forward network traffic, when local, remote, and dynamic forwarding help, and why they are best for controlled, temporary access.

·

cybersecurity, Encryption, Secure Shell, Security, SSH Tunnel, Technology

¶¶¶¶¶

Microsoft Fixes CosmosEscape Flaw That Could Allow Any Cosmos DB Takeover

Cybersecurity researchers at Wiz found CosmosEscape in Azure’s Gremlin API, exposing a master key that could access any Cosmos DB account. Microsoft fixed it, with no customer impact found.

·

Azure, Azure Cosmos DB, Cosmos DB, CosmosEscape, cybersecurity, database, Microsoft, Security, vulnerability

¶¶¶¶¶

LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach

LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.

·

Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Data Breaches, Extortion, Healthcare, LeakNet, Medical, NYCHH, Privacy, Ransomware, Security, Zohran Mamdani

¶¶¶¶¶

CVSS 10.0 RufRoot Flaw Allowed Attackers to Hijack Ruflo Without Logging In

Ruflo fixed a CVSS 10.0 flaw that exposed its MCP bridge without any authentication, putting AI provider keys, stored chats and persistent agent memory at risk.

·

Claude Flow, cybersecurity, Noma Security, Ruflo, RufRoot, Security, vulnerability

¶¶¶¶¶

22-Year-Old IPMI Flaw Exposes 24,000 Servers to Offline Password Cracking

Researchers found 24,650 public BMC interfaces leaking IPMI password hashes, exposing servers to offline password cracking through a decades-old protocol flaw.

·

22-Year-Old IPMI Flaw Exposes 24K Servers to Offline Password Cracking, BMC, cybersecurity, IPMI, Lava, Password, Security, vulnerability

¶¶¶¶¶

Mate Security Grows Over 500% Since Q3 2025 and Pushes Past $50M in Funding

Mate Security secures $35M in Series A funding after 500% growth, as Fortune 500 demand grows for its agentic AI security operations platform worldwide.

·

cybersecurity, Mate Security, Security

¶¶¶¶¶

PhantomEnigma Infects Organizations with Malware via Hijacked Government Websites

PhantomEnigma abuses Brazilian government websites and trusted email channels to spread malware, target banks, evade security checks, and maintain access.

·

ANY.RUN, Cyber Attack, cybersecurity, Malware, PhantomEnigma, Security, Threat Intelligence

¶¶¶¶¶

ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak

EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.

·

Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Dark Web, Data Breach, Data Breaches, Ernst & Young, Extortion, EY, Security, ShinyHunters

¶¶¶¶¶

1010.cx

1010.cx

Category: Security