Anthropic confirms Claude Mythos-class models will roll out to the public

Multiple high-risk developments: active exploitation of FortiClient EMS authentication bypass (CVE-2026-35616) to push an infostealer called EKZ; an unpatched Gogs zero-day allowing remote code execution on internet-facing instances; and a likely Russian cluster (“GreyVibe”) using LLMs (ChatGPT, Gemini) to generate phishing lures alongside custom malware. Additional notable items: a commercially offered Android RAT (BTMOB) with a builder for tailored phishing payloads; FBI warnings about fake FIFA websites ahead of the 2026 World Cup; a confirmed Carnival data breach affecting nearly 6 million