Microsoft Vulnerabilities Exploited by Ransomware Gangs

US cyber-defense agency warns federal agencies to patch four Microsoft vulnerabilities within two weeks, including one patched 14 years ago and another linked to ransomware activity.

Anthropic Launches Mythos AI for Zero-Days

Anthropic launched Mythos, an AI model claiming to find and exploit zero-day vulnerabilities with high capability, potentially disrupting infosec or being pre-IPO hype.

Supply Chain Attacks Target Open Source

Two supply chain attacks in March infected popular open source tools with malware, stealing secrets from tens of thousands of organizations. Full impact unknown for months.