TAG
#vulnerabilities
Stories connected through a shared idea, actor, technology or theme.
OSERA establishes shared remediation standards for open-source softwareFINOS announced that the Open Source Enterprise Resiliency Alliance is operational, backed initially by six major banks. OSERA has published an open remediation standard and delivered fixes for more than 50 Java projects in its initial work.→Cycode releases agentic code scanning and attack-path chainingCycode said its Agentic Code Scanning combines rule-based and agentic analysis, while its benchmark testing found two authorisation CVEs that rule engines could not express. Its new Attack Chaining capability links related findings into multi-step exploit paths.→Anthropic expands Claude Mythos 5 access through defensive security productsAnthropic said Claude Mythos 5 is now available in Claude Security's public beta for Enterprise customers and is being integrated into partner cybersecurity tools. It also launched a $35 million Defender Advantage Fund for open-source security work and said Mythos scans return findings and suggested patches for human review rather than exposing the model directly.→Beazley says agentic AI drove a 36% jump in disclosed vulnerabilitiesBeazley Security reported that newly disclosed vulnerabilities rose 36% quarter over quarter in Q2 2026, while confirmed exploitation in the wild rose 10%. Its report attributed the disclosure increase to agentic AI in vulnerability research and said compromised credentials were the initial access vector in 67% of ransomware intrusions it investigated.→AI guardrails are obstructing legitimate offensive-security researchResearchers told TechCrunch that frontier models often refuse exploitability analysis, even when the work is intended to validate and patch vulnerabilities. Some are consequently turning to locally run open models with fewer restrictions.→