Know what changed.
Trace why it matters.

The DOJ and FBI seized the China-linked Microscan and FishHub tools, which court documents allege were operated by Integrity Technology Group, a PRC-based company with PRC government contracts. The tools were used to scan and, in some cases, intrude into U.S. and foreign critical-infrastructure systems and other networks.

The associated Mirai-based IoT botnet database contained records for more than 1.2 million infected devices in June 2024, including more than 385,000 in the United States; about 260,000 devices were actively infected then.

CrowdStrike analyzed a campaign against South Korean financial organizations in late September–early October 2026 that ended with stolen data, using open directories left by the attacker. The exposed directories contained Claude Code session histories, ARTEX configuration files, and Claude memory files, giving researchers direct visibility into the operator’s methods and tooling.

CrowdStrike said the activity demonstrates that AI tooling can enable a financially motivated actor to conduct multiple intrusions within a short time span.

Anthropic launched OSS Scanner, a free vulnerability scanner for open-source projects that uses its AI models to identify vulnerabilities and help maintainers fix them. Over six months, Anthropic’s models identified more than 29,000 possible vulnerabilities in widely used open-source software; experts had manually reviewed about 6,000.

Anthropic’s validation tested 97 critical or high-severity findings across 48 projects: 85 met its process threshold, 11 of the remaining findings were real duplicates, and one was invalid.