惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

D
Docker
L
LangChain Blog
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Recent Announcements
Recent Announcements
U
Unit 42
Recorded Future
Recorded Future
C
Check Point Blog
Microsoft Azure Blog
Microsoft Azure Blog
A
Arctic Wolf
N
News and Events Feed by Topic
AI
AI
TaoSecurity Blog
TaoSecurity Blog
S
Security Archives - TechRepublic
美团技术团队
小众软件
小众软件
Blog — PlanetScale
Blog — PlanetScale
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
The Last Watchdog
The Last Watchdog
T
Threat Research - Cisco Blogs
AWS News Blog
AWS News Blog
C
Cybersecurity and Infrastructure Security Agency CISA
Scott Helme
Scott Helme
N
News and Events Feed by Topic
Webroot Blog
Webroot Blog
Hacker News: Ask HN
Hacker News: Ask HN
V
V2EX
人人都是产品经理
人人都是产品经理
量子位
云风的 BLOG
云风的 BLOG
T
The Blog of Author Tim Ferriss
Hacker News - Newest:
Hacker News - Newest: "LLM"
B
Blog RSS Feed
宝玉的分享
宝玉的分享
I
InfoQ
S
Secure Thoughts
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
S
Security @ Cisco Blogs
Microsoft Security Blog
Microsoft Security Blog
IT之家
IT之家
F
Fortinet All Blogs
博客园 - 聂微东
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
T
Threatpost
J
Java Code Geeks
L
LINUX DO - 最新话题
Google DeepMind News
Google DeepMind News
The Cloudflare Blog
www.infosecurity-magazine.com
www.infosecurity-magazine.com

www.infosecurity-magazine.com

Just Three Ransomware Gangs Accounted for 40% of Attacks Last Month Google Chrome Rolls Out Protection Against Infostealers Targeting Session Cookies STX RAT Targets Finance Sector With Advanced Stealth Tactics Bitcoin Depot Reports $3.6m Crypto Theft After System Breach Atomic Stealer MacOS ClickFix Attack Bypasses Apple Security Warnings Middle East Hack-for-Hire Operation Traced to South Asian Cyber Espionage Group Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs Google Warns of New Threat Group Targeting BPOs and Helpdesks Google API Keys Quietly Gain Access to Gemini on Android Devices Critical Vulnerability in Ninja Forms Exposes WordPress Sites Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets Russian APT28 Hackers Hijack Routers to Steal Credentials, UK Security Agency Warns GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs New 'Storm' Infostealer Remotely Decrypts Stolen Credentials NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts Apple Expands iOS 18 Security Updates Amid DarkSword Threat Researchers Observe Sub-One-Hour Ransomware Attacks GitHub Used as Covert Channel in Multi-Stage Malware Campaign Most CNI Firms Face Up to £5m in Downtime from OT Attacks Google Introduces Android Dev Verification Amid Openness Debate New Venom Stealer MaaS Platform Automates Continuous Data Theft Chinese Hackers Target European Governments in Espionage Campaigns Eight in 10 UK Manufacturers Hit by Cyber Incident in a Year Hackers Hijack Axios npm Package to Spread RATs Maryland Man Charged Over $53m Uranium Finance Crypto Hack Phantom Project Bundles Infostealer, Crypter and RAT For Sale ChatGPT Security Issue Enabled Data Theft via Single Prompt TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets Employee Data Breaches Surge to Seven-Year High NCSC Urges Immediate Patching of F5 BIG-IP Bug Cybercriminals Exploit Tax Season With New Phishing Tactics Lloyds IT Glitch Exposed Data of Nearly 500,000 Banking Customers DeepLoad Malware Combines ClickFix With AI-Generated Code to Avoid Detection Critical Citrix NetScaler Vulnerability Exploited in the Wild ICO Fines UK Nuisance Call Scammers £100,000 European Commission Confirms Cloud Data Breach New Wave of AiTM Phishing Targets TikTok for Business TeamPCP Targets Telnyx Package in Latest PyPI Software Supply Chain Attack Quantum Computing Threat to Encryption Is Closer Than Expected, Warns Google UK Cracks Down on Chinese Crypto Marketplace for Funding Southeast Asia Scam Hubs Security Researchers Sound the Alarm on Vulnerabilities in AI-Generated Code Attackers Rapidly Weaponize Critical Oracle WebLogic RCE, Honeypot Study Finds EtherRAT Techniques Bypass Security Via Ethereum Smart Contracts AI Becomes the Top Cybersecurity Priority for Defenders as Criminals Exploit It, PwC Warns OpenAI Expands Bug Bounty to Cover AI Abuse and 'Safety' Concerns Iran-Linked Pay2Key Ransomware Group Re-Emerges Invoice Fraud Costs UK Construction Sector Millions, NCA Warns Cloud Phones Linked to Rising Financial Fraud Threat Hackers Exploit Compromised Enterprise Identities at Industrial Scale, Warns SentinelOne US: FCC Bans Foreign-Made Routers Over National Security Concerns TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise Experts Sound Alarm Over “Prompt Poaching” Browser Extensions Operation Henhouse Nets Over 500 Arrests in UK Fraud Crackdown RSA Conference: UK NCSC Head Urges Industry to Develop Vibe Coding Safeguards Silver Fox Cyber Campaigns Show Shift Toward Dual Espionage Citrix Urges Immediate Patching for Critical NetScaler Vulnerabilities New Npm 'Ghost Campaign' Uses Fake Install Logs to Hide Malware Former Ukrainian Foreign Minister Dmytro Kuleba to Address the New Cyber Frontline at Infosecurity Europe Enterprise Cybersecurity Software Fails 20% of the Time, Warns Absolute Security Russian Initial Access Broker Handed 81-Month Sentence Handala Group Tied to Iranian Hack‑and‑Leak Operations, FBI Reveals Most Cybersecurity Staff Don’t Know How Fast They Could Stop a Cyber-Attack on AI Systems Tycoon2FA Phishing Service Resumes Activity Post-Takedown High-Tech Sector Overtakes Finance as Top Target for Cyber-Attacks, Mandiant Reports Trivy Supply Chain Attack Expands With New Compromised Docker Images CISA Orders US Government to Patch Maximum Severity Cisco Flaw Operation Alice Takes Down 370,000+ Dark Web Sites Hackers Exploit Critical Langflow Bug in Just 20 Hours NCA Boss Warns That Teens Are Being “Radicalized” Into Cybercrime Online Ransomware Affiliate Exposes Details of 'The Gentlemen' Operation Financial Brands Targeted in Global Mobile Banking Malware Surge FCA Updates Cyber Incident and Third-Party Reporting Rules AWS Warns Hackers Have Abused Cisco Firewall Zero-Day Since January UK: Regulation Drives Cyber Spending for Critical Infrastructure Orgs New Ubuntu Flaw Enables Local Attackers to Gain Root Access Crypto Scam "ShieldGuard" Dismantled After Malware Discovery AI-Enabled Adversaries Compress Time-to-Exploit Following Vulnerability Disclosure Vidar Stealer 2.0 Exploits GitHub, Reddit to Deliver Malware via Fake Game Cheats AI Issues Will Drive Half of Incident Response Efforts by 2028, Says Gartner Android OS-Level Attack Bypasses Mobile Payment Security 'CursorJack’ Attack Path Exposes Code Execution Risk in AI Development Environment Surge in Nation State Attacks on UK Firms Amid Cyber Warfare Fears Aeternum Botnet Shifts Command Control to Polygon Blockchain Leading Semiconductor Supplier Advantest Hit by Ransomware Attack Remcos RAT Expands Real-Time Surveillance Capabilities SMEs Wrong to Assume They Won’t Be Hit by Cyber-Attacks, NCSC Boss Warns Google Warns of In the Wild Exploit as It Patches New Chrome Zero Day Phorpiex Phishing Delivers Low-Noise Global Group Ransomware BridgePay Confirms Ransomware Attack, No Card Data Compromised New Hacking Campaign Exploits Microsoft Windows WinRAR Vulnerability Labyrinth Chollima Evolves into Three North Korean Hacking Groups Google Disrupts Extensive Residential Proxy Networks
Cyber Experts Urge US to Lift Ban on Anthropic’s Frontier AI Models
https://www.infosecurity-magazine.com/profile/kevin-poireault/ · 2026-06-15 · via www.infosecurity-magazine.com

Over 50 cybersecurity professionals have publicly requested the US government lift the ban on access to Mythos 5 and Fable 5, the latest frontier large language models (LLMs) released by AI company Anthropic.

On June 12, Anthropic announced that the US government had issued an export control directive to suspend all access to Fable 5 and Mythos 5, released just a few days earlier, by any foreign national.

This decision prompted the AI company to suspend access to both models for all customers to ensure compliance with the directive.

Fable 5 was presented by Anthropic as a general-access LLM powered by the same underlying frontier AI model as Mythos 5 – an upgrade from Claude Mythos Preview – but with additional guardrails, especially in areas like cybersecurity where the company said it “could be misused to cause serious damage.”

The US government invoked “national security concerns” to explain its directive, which Anthropic believes originated from research that allegedly found a method of bypassing Fable 5’s guardrails.

“We reviewed a demonstration of this specific technique being used to identify a small number of previously known, minor vulnerabilities. These vulnerabilities all appear relatively simple and we have found that other publicly-available models are able to discover them as well without requiring a bypass,” stated Anthropic.

The company denied the existence of a “universal jailbreak” for Fable 5.

Cybersecurity Community Criticizes Fable, Mythos Ban

Two days later, a group of 54 CISOs, cybersecurity practitioners and vendors signed an open letter addressed to Howard Lutnick, the US Secretary of Commerce, and Sean Cairncross, the US National Cyber Director.

The group asked for the export control directives on Fable and Mythos to be lifted.

They also called for the US government to “commit to an open, scientific and transparent process of handling AI risk assessments in the future.”

While the signatories acknowledged that Anthropic’s latest models are “quite good at finding flaws and weaponizing exploits,” they argued they are not the only tools that can be used for this purpose.

The ability to identify insecure code is a fundamental feature of any secure coding assistant and equivalent capabilities already exist across other models including OpenAI's GPT-5.5, Anthropic's Claude Opus and Sonnet, and Chinese models such as Kimi 2.7, the signatories noted.

Additionally, they acknowledged Anthropic’s contribution to prevent Fable from “cyber offensive uses” and said the AI company is now addressing the research that likely prompted the US government’s decision.

“To pull the best capabilities away from defenders without a good reason when our adversaries are rapidly advancing is dangerous,” they warned.

The open letter also said the US government action has created market uncertainty and risked America’s AI leadership “without any real risk to justify it.”

Signatories included Alex Stamos, chief product officer at Corridor and former chief security officer at Facebook and Yahoo, Joe Levy, CEO of Sophos, and Sandra McLeod, CISO at Zoom Communications.

Their stance has been shared by other cybersecurity experts. Despite not having signed the open letter, William Wright, CEO of Closed Door Security, said that, while the US reaction “suggests that the worries around jailbreaking these models are real,” banning access to the model is the wrong approach.

“Cutting off access to the model so abruptly will cause huge logistical problem, both within Anthropic and within any critical industry partners given access to the model. Rather than foster resilience, this move creates chaos,” he explained.

He called the US government to work “transparently and with clear guiding principles” with AI and cybersecurity experts.

Image credits: Nwz /  jackpress / Shutterstock.com