vulncheck.com
Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthropic’s 37,966 reported findings, only 7,349 (19.4%) have been made public and just 217 have been marked fixed.
Summary drawn from vulncheck.com's own description of the story.
Ars Technica
*sshole" poses a serious threat to Internet security. Hackers are actively exploiting a recently discovered critical vulnerability that allows them to log in to privileged accounts on many Linux systems, multiple researchers are reporting.
Ars Technica
Company said a "multifront cyberattack" included AI agents and an on-path data snatch. Blockchain analysis firm Chainalysis said that hackers have obtained sensitive personal information, including names, usernames, password hashes, and live tokens, for all of its users following a breach of its network security.
OpenAI
OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel. We've developed an autonomous vulnerability discovery, exploitation, and patching pipeline.
atlasum.net
CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.