AI recruiting startup Mercor confirms it was hit in a massive supply chain attack on open-source library LiteLLM, which sees millions of daily downloads, with extortion group Lapsus$ claiming responsibility and sharing allegedly stolen data including Slack conversations and contractor videos, while thousands of other companies may also be compromised.
OpenAI and Anthropic are racing to release next-gen AI models — 'Spud' and 'Claude Mythos' — with Anthropic already briefing government officials on unprecedented cybersecurity risks, while both systems leverage recursive self-improvement, raising urgent alarms about AI safety and unpredictable autonomous behavior.
Hermes Agent v0.6.0 launches March 30, 2026, bringing multi-profile isolation, expanded platform integrations including Feishu, WeCom, and Slack multi-workspace OAuth, plus a major security overhaul with atomic config writes, dangerous command detection, and automatic inference failover across 95 merged PRs.
Anthropic launches a Compliance API for the Claude Platform, giving organization admins programmatic access to audit logs that track user activity and configuration changes, though model inference and direct Claude interactions remain unlogged.
Hermes Agent v0.5.0 launches today with Hugging Face integration, Telegram Private Chat Topics, a native Modal SDK backend, major security hardening including supply chain fixes and SSRF protections, GPT tool-use enforcement, and over 50 bug patches.
Anthropic's most powerful AI model yet, Claude Mythos, has been exposed in a data leak, revealing it dramatically outperforms previous models in coding and cybersecurity — but comes with alarming warnings that it is 'far ahead of any other AI model in cyber capabilities' and could enable large-scale AI-driven cyberattacks.
Anthropic's accidental leak of nearly 3,000 internal files reveals 'Claude Mythos,' a powerful new AI model surpassing Opus 4.6 in coding, reasoning, and cybersecurity, while OpenAI quietly prepares a rival model codenamed 'Spud' — with both companies racing to launch flagship models ahead of their anticipated IPOs.
Databricks launches Lakewatch, an AI-powered SIEM now in Private Preview, promising up to 80% cost reduction in cybersecurity operations by deploying AI agent swarms for automated threat detection, triage, and investigation — backed by a deepened Anthropic partnership and two strategic acquisitions.
Cisco launches its LLM Security Leaderboard, revealing Anthropic's Claude models dominate AI safety rankings with 8 of the top 10 spots, while Mistral, DeepSeek, and other major providers fall dangerously to the bottom in resistance to adversarial attacks.
Y Combinator-backed compliance startup Delve, valued at $300 million, is under fire from an anonymous whistleblower alleging it fabricates compliance evidence, potentially exposing hundreds of clients to criminal HIPAA liability and GDPR fines, while a security researcher simultaneously uncovers critical vulnerabilities in its systems.