Ransomware DataBreachToday.com

Anthropic's AI Model Exposes How Unprepared Enterprises Are to Respond
Anthropic's announcement this week of Claude Mythos Preview frontier model capable of finding zero-days flaws humans may miss is both a warning and a call to action for CIOs: The way enterprises have been managing cybersecurity is about to change forever, and they need to get ready.

Early Tests of New Anthropic AI Model Show Fast Detection, Better Flaw Correlation
CrowdStrike's early testing of Anthropic's new Claude Mythos Preview AI model shows faster vulnerability detection and improved cross-system context, signaling a shift toward AI-driven security operations that compress discovery-to-response timelines and force new defensive frameworks.

DOD Official: AI Firm Wanted 'Approval Role in the Operational Decision Chain'
Internal memos used by the Department of Defense to justify its decision to blacklist artificial intelligence firm Anthropic said the firm's models could not be reliably controlled for military use.

CFOs Should Know: Lackadaisical Security Carries a Price
Bad cybersecurity is bad for business. A badly secured business may pay as much as ten extra basis points for a loan than if its posture had been up to scratch, find academic studies examining how U.S. banks price debt. The bill for poor cybersecurity could run hundreds of thousands of dollars.

Operational Discipline and Judgment Are Critical in Managing Cyber Risk
Transitioning from armed forces can feel like stepping into unfamiliar terrain. Nowhere is this perception stronger than in cybersecurity. The good news: Many of the skills veterans have already developed translate directly to cybersecurity roles.

Bank Cybersecurity Veteran Moona Ederveen-Schneider on Demystifying the Process
Enterprises need to start planning and executing their transition to post-quantum cryptography, and the best way to get started is through tabletop exercises - marshaling internal stakeholders in security, HR, legal and finance, said Moona Ederveen-Schneider, founder of consultancy Resilia Connect.

Experts Warn of Faster and Higher Volume Attacks, Rising Patient Safety Worries
Emerging powerful AI tools - such as Anthropic's new Claude Mythos - that are capable of autonomously identifying and exploiting software bugs in a flash could reshape the healthcare cyber landscape by accelerating attacks and raising the risk of widespread operational disruption, experts said.

Project Glasswing Strengthens Key Platforms, Leaves Broad Exposure Untouched
Project Glasswing is giving select cybersecurity giants early access to Anthropic’s Claude Mythos Preview, boosting investor confidence in leaders Palo Alto Networks and CrowdStrike while raising concerns that smaller vendors, vulnerability firms and the broader internet will fall further behind.

Also, Medusa Ransomware, Grafana Flaw, German Political Party Breach
This week, German police unmasked a REvil leader, a critical Docker flaw, Medusa ransomware surged, DPRK hackers abused GitHub, Grafana AI bugs enabled data theft, scams hit $20B in the United States, Ivanti exploited and attacks hit Northern Ireland schools and a German political party.

Ruling Keeps Claude Models Out of Defense Systems During Separate Legal Challenges
A federal appeals court allowed the Pentagon to enforce its "supply-chain risk" designation against Anthropic, keeping its AI models barred from defense contracts while parallel litigation continues to challenge the policy's legality and constitutional limits.

But Expect Plenty of Bottlenecks in Coordination, Validation and Patch Deployment
Anthropic's Claude Mythos Preview shows how AI can discover and chain vulnerabilities at scale, but the bigger challenge for defenders is redesigning disclosure, triage and patching processes so fixes can be deployed safely before attackers exploit the gap.

Defense of Democracies' Mark Montgomery on Warfare Trends, Geopolitical Threats
Cyber operations now support military strategy rather than just acting alone. Mark Montgomery of the Foundation for Defense of Democracies warns that as militaries integrate cyber and kinetic action, private sector enterprises are facing greater exposure to geopolitical threats.

Okta's Brett Winterford on Identity Threats and Agentic AI Risks
AI is accelerating cyberattacks, collapsing timelines and exposing new identity risks. Okta's Brett Winterford explains how attackers are using AI to scale phishing, exploit credentials and infiltrate enterprises - and what CIOs must do to defend against this rapidly evolving threat landscape.

Also: How AI May Democratize Cybercrime and How Everyday Routers Enable Espionage
In this week's ISMG panel, four ISMG editors discussed big shifts in cybersecurity: Anthropic's "dangerous" new AI model that can uncover thousands of zero-days, growing concerns about a surge in AI-driven flaws, and the FBI disrupting a Russian espionage campaign targeting everyday routers.

Pure Play OT Security Firms Want A Seat At The Table
There's growing concern in the operational technology cybersecurity community that manufacturers and operators, and their security vendors, will be left out in the cold by the latest efforts to use artificial intelligence in securing critical software.

Signature Healthcare EHRs, Patient Portal Offline; Some Cancer Care Cancelled
A Massachusetts healthcare system is diverting ambulance patients and is operating under downtime procedures as it deals with a cyberattack. The organization has also canceled certain cancer treatments, taken its patient portal offline and is unable to fill prescriptions at its retail pharmacies.

James Foster Points to Agentic Security and Need for Customers to Outsource Defense
CEO James Foster says managed detection and response is evolving into an AI-powered agentic model as enterprises face faster AI-driven threats. He stresses balancing automation with human expertise while positioning eSentire as a vendor-neutral platform integrating best-of-breed security tools.

CISA: Iran-Linked Groups Actively Exploiting OT Exposure Risks, PLC Programmers
Federal agencies are warning that Iranian-linked actors have begun actively exploiting internet-facing PLCs and misconfigured OT systems across U.S. critical infrastructure, enabling network access, lateral movement and potential disruption amid rising geopolitical tensions.

Anthropic Limits Access to New AI Model Amid Concerns Over Misuse
Anthropic asserted Tuesday that it's created a new era for cybersecurity after developing an artificial intelligence model too dangerous to release to public. The company's unreleased Claude Mythos Preview model has already found thousands of high-severity vulnerabilities.

Researchers Find Frontier Models Defy Humans to Protect AI Peers
Artificial intelligence systems will lie, falsify records and sabotage company systems to prevent their fellow models from being shut down - even when no one told them to care. Researchers at the University of California Berkeley and Santa Cruz campuses dub the behavior "peer-preservation."