惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

小众软件
小众软件
量子位
博客园 - 叶小钗
Apple Machine Learning Research
Apple Machine Learning Research
U
Unit 42
IT之家
IT之家
F
Fortinet All Blogs
GbyAI
GbyAI
MongoDB | Blog
MongoDB | Blog
H
Hackread – Cybersecurity News, Data Breaches, AI and More
大猫的无限游戏
大猫的无限游戏
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
The Register - Security
The Register - Security
NISL@THU
NISL@THU
Webroot Blog
Webroot Blog
A
Arctic Wolf
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
V
Visual Studio Blog
Recent Announcements
Recent Announcements
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Blog — PlanetScale
Blog — PlanetScale
L
LangChain Blog
P
Palo Alto Networks Blog
Y
Y Combinator Blog
WordPress大学
WordPress大学
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
AWS News Blog
AWS News Blog
有赞技术团队
有赞技术团队
Engineering at Meta
Engineering at Meta
C
Cybersecurity and Infrastructure Security Agency CISA
aimingoo的专栏
aimingoo的专栏
Know Your Adversary
Know Your Adversary
Cyberwarzone
Cyberwarzone
Martin Fowler
Martin Fowler
The Hacker News
The Hacker News
P
Privacy International News Feed
T
Threat Research - Cisco Blogs
G
GRAHAM CLULEY
宝玉的分享
宝玉的分享
博客园 - 聂微东
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
The GitHub Blog
The GitHub Blog
S
Securelist
T
The Exploit Database - CXSecurity.com
T
Threatpost
Microsoft Azure Blog
Microsoft Azure Blog
The Cloudflare Blog
F
Full Disclosure

Socket

152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic Andrew Becherer Joins Socket as Chief Information Security Officer Socket Partners with Replit to Block Malicious Packages in AI-Powered Development npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems pnpm 11.5 Adds Support for Recognizing npm Staged Publishes pnpm 11.5 Adds Support for Recognizing npm Staged Publishes Federal Audit Finds NIST Wasted Funds With No Plan to Clear NVD Backlog Federal Audit Finds NIST Wasted Funds With No Plan to Clear NVD Backlog Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages Famous Chollima Targets PHP Developers Through Compromised Packagist Package Famous Chollima Targets PHP Developers Through Compromised Packagist Package Rust Moves to Restrict LLM Use in Contributions After Months of Internal Debate Rust Moves to Restrict LLM Use in Contributions After Months of Internal Debate Malicious NuGet Package Impersonates Sicoob SDK to Exfiltrate Banking Certificates and Passwords Malicious NuGet Package Impersonates Sicoob SDK to Exfiltrate Banking Certificates and Passwords Feross on TBPN: Socket's Series C and the State of Software Supply Chain Security Feross on TBPN: Socket's Series C and the State of Software Supply Chain Security OSV Withdraws 157 Malware Reports After Automated False Positives Hit npm and PyPI OSV Withdraws 157 Malware Reports After Automated False Positives Hit npm and PyPI TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages and Hundreds of Versions Across npm, PyPI, and Crates.io TrapDoor Crypto Stealer Supply Chain Attack Hits 34 Packages and Hundreds of Versions Across npm, PyPI, and Crates.io Laravel Lang Compromised with RCE Backdoor Across 700+ Versions Malicious Postinstall Hook Found Across 700+ GitHub Repositories, Including Packagist and Node.js Projects AI Has Taken Over Open Source npm Invalidates Granular Access Tokens as Mini Shai-Hulud Sweeps the Registry Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit Socket raises $60M Series C at $1B valuation led by Thrive Capital to secure AI-driven software development Socket Raises $60M Series C at a $1B Valuation to Help Enterprises Build Securely With AI Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor Active Supply Chain Attack Compromises @antv Packages on npm Popular node-ipc npm Package Infected with Credential Stealer TeamPCP and BreachForums Launch $1,000 Contest for Supply Chain Attacks Packagist Urges Immediate Composer Update After GitHub Actions Token Leak GemStuffer Campaign Abuses RubyGems as Exfiltration Channel Targeting UK Local Government Socket Named to Rising in Cyber 2026 List of Top Cybersecurity Startups TanStack npm Packages Compromised in Ongoing Mini Shai-Hulud Supply-Chain Attack fsnotify Maintainer Dispute Sparks Supply Chain Concerns Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape 5 Malicious NuGet Packages Impersonate Chinese UI Libraries to Distribute Crypto Wallet and Credential Stealer pnpm 11 Adds Supply Chain Protection Defaults for Minimum Release Age and Exotic Subdependencies PyPI Fixes High-Severity Access Control Issues Found in Security Audit Malicious Ruby Gems and Go Modules Impersonate Developer Tools to Steal Secrets and Poison CI Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack lightning PyPI Package Compromised in Supply Chain Attack Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables SAP CAP npm Packages Hit by Supply Chain Attack Socket Has Acquired Secure Annex 73 Open VSX Sleeper Extensions Linked to GlassWorm Show New Malware Activations Introducing Reachability for PHP Introducing Data Exports Malicious Checkmarx Artifacts Found in Official KICS Docker Repository and Code Extensions Introducing Organization Notifications in Socket Introducing Reports: An Extensible Reporting Framework for Socket Data Socket for Jira Is Now Available Socket Named Top Sales Organization by RepVue NIST Officially Stops Enriching Most CVEs as Vulnerability Volume Skyrockets Socket Selected for OpenAI's Cybersecurity Grant Program Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code 108 Chrome Extensions Linked to Data Exfiltration and Session Theft via Shared C2 Infrastructure Node.js Drops Bug Bounty Rewards After Funding Dries Up The Hidden Blast Radius of the Axios Compromise
US Government Forces Anthropic to Pull Claude Fable Days After Launch
Sarah Gooding · 2026-06-13 · via Socket

Sidebar CTA Background

Secure your dependencies with us

Socket proactively blocks malicious open source packages in your code.

Install

For three days, Claude Fable 5 had users around the world one-shotting work they expected to take days or weeks: major code reviews, migrations, long-running builds, and projects some described as career-changing. Then access disappeared.

If you were waiting for the weekend to try Claude Fable 5, you’re out of luck.

Anthropic suspended access to Claude Fable 5 and Claude Mythos 5 on Friday night after receiving a US government export control directive blocking access by foreign nationals, including foreign national Anthropic employees. Anthropic said the practical effect of the order is that it must disable both models for all customers while it works to comply.

The shutdown came just three days after Anthropic launched Fable 5 as its most capable generally available model to date. In its June 9 launch post, Anthropic described Fable 5 as a “Mythos-class” model with safeguards for general use, including classifier-based fallback to Claude Opus 4.8 for some cybersecurity, biology and chemistry, and distillation-related requests. Mythos 5, the less-restricted version of the same underlying model, was limited to selected cyberdefense and infrastructure partners through Project Glasswing, with broader trusted access planned.

Anthropic said the government directive arrived at 5:21pm ET on June 12 and did not include specific details about the national security concern. The company said its understanding is that the government became aware of a method for bypassing, or “jailbreaking,” Fable 5.

Anthropic disputed the apparent technical basis for the directive. The company said it reviewed a demonstration of the technique being used to identify “a small number of previously known, minor vulnerabilities,” and said other publicly available models could find the same issues without requiring a bypass. Anthropic also said it has not received evidence of a universal jailbreak, meaning a method that broadly disables the model’s safeguards across many cyber capabilities.

Instead, Anthropic described the reported issue as a narrow, non-universal jailbreak that “essentially consists of asking the model to read a specific codebase and fix any software flaws.” That workflow is already common in defensive software engineering: feed a model a codebase, ask it to find bugs, and have it propose fixes.

Frustration Mounts Over Fable Shutdown#

The abrupt suspension immediately created customer fallout. In the r/ClaudeAI subreddit, users reported losing access mid-project, after upgrading paid plans, or while preparing to test Fable 5 before Anthropic’s temporary subscription access window expired on June 22. Now Anthropic is dealing with a launch-week nightmare: users who really wanted Fable paid up, lost access, and are demanding refunds.

Anthropic had already positioned Opus 4.8 as Fable’s safety fallback. After the suspension, it became the replacement. For users who had spent three days putting Fable through complex tasks, the return to other models felt like a painful downgrade.

Some users said Anthropic’s support bot processed refunds quickly, while others said they were denied or told a refund would remove broader Claude access. Several also reported that Anthropic reset weekly usage limits, though that does not fully address customers who upgraded specifically for access to Fable 5.

The reaction was not aimed only at the government. Some users blamed Anthropic’s own safety messaging, arguing that the company had repeatedly emphasized the danger of its most capable models while also calling for stronger AI oversight. Now, those users are asking whether that framing made Fable 5 an easier target for intervention.

Anthropic said it is complying with the directive but disagrees with the decision. The company said a narrow jailbreak finding should not justify recalling a commercial model “deployed to hundreds of millions of people,” and warned that applying the same standard across the industry could halt new frontier model deployments.

The incident leaves Anthropic in an awkward position. Fable 5 was marketed as a major step forward for software engineering and long-context work, with safeguards designed to make Mythos-class capability safe for broad release. Days later, the model is unavailable to everyone, including developers who paid to use it before the June 22 cutoff.

Anthropic proved there was strong demand for Fable, then had to remove it from the users most eager to pay for it. The model’s first week now sits at the center of a larger fight over frontier AI access, where government intervention can reach directly into a commercial AI product and have it pulled from the market.