Anthropic restricts its powerful new Mythos AI hacking model to elite enterprise clients like AWS and JPMorgan Chase, sparking accusations that the move is less about safety and more about locking out smaller competitors while securing lucrative contracts.
Anthropic deploys Claude Mythos Preview, a powerful AI model deemed too dangerous for public release, in a $100M cross-industry initiative called Project Glasswing, partnering with AWS, Apple, Google, Microsoft, and CrowdStrike to identify and fix critical software vulnerabilities before malicious actors can exploit them.
Cisco launches Nexus One, a unified networking platform integrating silicon, software, and security to eliminate data center fragmentation and power AI-scale infrastructure with quantum-safe encryption, real-time GPU visibility, and multi-OS support.
MCP mandates OAuth 2.1 and PKCE in its June 2025 security overhaul, enforcing stricter authentication for remote server deployments while separating resource and authorization servers, though open challenges around scope discovery, dynamic client registration, and token error handling over SSE connections still remain.
Hermes Agent v0.7.0 launches with a sweeping security overhaul, introducing an anti-detection browser, pluggable memory providers, credential pool rotation, and critical fixes blocking secret exfiltration — all packed into 168 merged PRs from over 35 contributors.
Meta has indefinitely halted work with AI data firm Mercor following a massive security breach linked to threat actor TeamPCP, who compromised AI tool LiteLLM in a supply chain attack potentially exposing sensitive training data across top AI labs including OpenAI, while a group falsely claiming to be Lapsus$ attempts to sell over 200GB of stolen data on the dark web.
AI recruiting giant Mercor, valued at $10 billion and serving OpenAI, Anthropic, and Meta, confirms a major data breach after hacking group TeamPCP planted malicious code in open-source AI library LiteLLM, with notorious extortion group Lapsus$ now claiming to hold 4TB of stolen data including source code, database records, and internal communications.
Iranian missile strikes have taken down AWS data centers in Bahrain and Dubai, with Amazon declaring multiple zones 'hard down' and engineers scrambling to migrate affected workloads, while broader disruptions to critical materials flowing through the Strait of Hormuz now threaten the global semiconductor supply chain.
Anthropic accidentally exposes 512,000 lines of Claude's internal source code via an npm package map file, revealing unreleased features, secret codenames, and a more powerful Claude 4.6 variant — marking the company's second major accidental disclosure in two weeks and raising serious concerns about the safety-focused AI firm's own operational security.
Anthropic accidentally leaks 512,000 lines of Claude's proprietary TypeScript source code via an npm package, exposing secret AI architecture, unreleased model codenames, a hidden 'Undercover Mode,' and an internal model with a 29-30% false claims rate — while users who installed the package during a specific window face additional supply-chain attack risks and are urged to rotate API keys immediately.