Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.

Security

  • U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals (The Hacker News)
    Anthropic said on Friday it will "abruptly disable" its most advanced artificial intelligence (AI) models, Claude Fable 5 and Mythos 5, for all users after the U.S. government ordered it to suspend access to the models for foreign nationals
  • Friday Squid Blogging: Squid-Inspired Fluid Pump (Schneier on Security)
    This fluid pump was inspired by the way squids propel themselves through the water. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
  • Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit (The Hacker News)
    Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest developer s
  • CISA Adds One Known Exploited Vulnerability to Catalog (CISA Advisories)
    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulne
  • Bernie Sanders’ AI Sovereign Wealth Fund Plan (Schneier on Security)
    Let no one accuse Bernie Sanders of ducking the big questions. Writing in the New York Times last week, the senator asked : “Will the future of humanity be determined by a handful of billionaires who have promoted and developed AI, with vir

Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →