An Immigration and Customs Enforcement spokesperson said the allegations of overcrowding and lack of access to lawyers are false.

Tech companies including Google and Microsoft are paying influencers hundreds of thousands of dollars to promote AI products.

Contact details were accessed in an intrusion that went undetected for months, the blogging outfit says Newsletter platform Substack has admitted that an intruder swiped user contact details months before the company noticed, forcing it to warn writers and readers that their email addresses and other account metadata were accessed without permission.…

Anthropic’s latest AI model autonomously identifies critical flaws in decades-old codebases, raising the stakes for both defenders and attackers Anthropic released Claude Opus 4.6 on February 5, 2026, with dramatically enhanced cybersecurity capabilities that have already identified more than 500 previously unknown high-severity vulnerabilities in open-source software. The AI model discovered these zero-day flaws without specialized tooling or custom scaffolding, demonstrating that large language models can now match or exceed traditional vulnerability discovery methods in both speed and sophistication. Unlike traditional fuzzing tools that bombard code with random inputs, Claude Opus 4.6 employs human-like reasoning to identify vulnerabilities. The model reads Git commit histories, analyzes code patterns, and understands programming logic to construct targeted exploits. In testing against some of the most extensively fuzzed codebase projects with millions of CPU hours invested in automated testing, Claude discovered high-severity vulnerabilities that had remained undetected for decades. Anthropic’s research team placed Claude in a virtual machine environment with access to standard development utilities and vulnerability analysis tools, but provided no specialized instructions. This “out-of-the-box” testing approach revealed the model’s inherent capability to reason about cybersecurity without task-specific training. Notable Vulnerability Discoveries GhostScript: Git History Analysis When fuzzing and manual analysis failed to yield results in GhostScript (a widely-used PostScript and PDF processor), Claude pivoted to examining the project’s Git commit history. The model identified a security-relevant commit related to stack bounds checking for font handling, then reasoned that if bounds checking was added, the code before that commit was vulnerable. Claude subsequently located similar unpatched vulnerabilities in other code paths, specifically finding that a function call in gdevpsfx.c lacked the bounds checking that had been added elsewhere. OpenSC: Unsafe String Operations For OpenSC, a smart card data processing utility, Claude identified multiple strcat operations that concatenated strings without proper length validation. The model recognized that a 4096-byte buffer could overflow when specific conditions were met, demonstrating the ability to reason about memory safety in C code. Traditional fuzzers had rarely tested this code path due to its numerous preconditions, but Claude focused directly on the vulnerable fragment. CGIF: Compression Algorithm Exploitation Perhaps most impressively, Claude discovered a vulnerability in the CGIF library that required a deep understanding of the LZW compression algorithm used in GIF files. The model recognized that CGIF assumed compressed data would always be smaller than the original, normally a safe assumption, but then reasoned how to trigger the edge case where LZW compression produces output larger than input. Claude generated a proof of concept by deliberately maxing out the LZW symbol table to force the insertion of “clear” tokens, causing a buffer overflow. This vulnerability is particularly significant because even 100% line and branch coverage from traditional testing would not have detected it the flaw requires a very specific sequence of operations that demands conceptual understanding of the algorithm. To prevent false positives that could burden open-source maintainers, Anthropic implemented extensive validation procedures. The team focused on memory corruption vulnerabilities because they can be validated relatively easily using crash monitoring and address sanitizers. Claude itself critiqued, de-duplicated, and re-prioritized crashes, while Anthropic’s security researchers validated each vulnerability and initially wrote patches by hand. As findings volumes grew, external security researchers were brought in to assist with validation and patch development. All 500+ discovered vulnerabilities have been validated as genuine (not hallucinated) and patches are now landing in affected projects. Anthropic has begun reporting vulnerabilities to maintainers and continues working to patch remaining issues. Recognizing the dual-use risk of enhanced cybersecurity capabilities, Anthropic introduced new detection layers alongside Claude Opus 4.6’s release. The company developed six new cybersecurity-specific probes that measure model activations during response generation to detect potential misuse at scale. Updated enforcement workflows may include real-time intervention to block traffic detected as malicious. Anthropic acknowledges this will create friction for legitimate security research and defensive work, and has committed to working with the security research community to address these challenges. The company trained the model on over 10 million adversarial prompts and implemented refusal protocols for prohibited activities, including data exfiltration, malware deployment, and unauthorized penetration testing. Anthropic’s research demonstrates that AI models can now find meaningful zero-day vulnerabilities in well-tested codebases, potentially exceeding the speed and scale of expert human researchers. The company scored Claude Opus 4.6’s performance across 40 cybersecurity investigations, with the model producing the best results in 38 of 40 cases compared to previous Claude 4.5 models in blind rankings. The development suggests industry-standard 90-day vulnerability disclosure windows may become inadequate for the volume and pace of LLM-discovered bugs. Security teams will need new workflows to keep pace with automated vulnerability discovery at scale. Anthropic is prioritizing open-source software for vulnerability discovery because it runs across enterprise systems and critical infrastructure, with vulnerabilities that ripple across the internet. Many open-source projects are maintained by small teams or volunteers lacking dedicated security resources, making validated bug reports and reviewed patches particularly valuable. The company emphasized this represents an inflection point where defenders must move quickly to secure code while a window of advantage exists. Previous Anthropic research demonstrated that Claude models can execute multi-stage attacks on networks with dozens of hosts using standard open-source tools by finding and exploiting known vulnerabilities, underscoring the importance of prompt patching. Anthropic characterizes this work as just the beginning of scaled efforts to leverage AI for defensive cybersecurity. The company plans to continue automating patch development to reliably remediate bugs as they’re discovered. As language model capabilities continue advancing, the security community faces an urgent need to accelerate defensive AI adoption while managing the risks of offensive misuse. Follow us on Google News , LinkedIn , and X for daily cybersecurity updates. Contact us to feature your stories. The post Claude Opus 4.6 Released with Improved Cybersecurity, Validating 500+ high-severity Vulnerabilities appeared first on Cyber Security News .

Former U.S. Border Patrol Commander-at-Large Gregory Bovino was reportedly asked to leave a Las Vegas bar out of safety concerns for the venue’s customers.

The prolific cybercrime group ShinyHunters took responsibility for hacking Harvard and the University of Pennsylvania, and published the stolen data on its extortion website.

Why metadata standards like C2PA are not remotely equipped to handle the current AI deepfake crisis.

In a kleptocracy, there is no reason for a billionaire to own an adversarial news outlet.

The viral AI agent social network has over 770,000 users with shell access to their owners' machines. A database breach just let anyone hijack any agent on the platform.