Claude Fable 5 isn’t permanently leaving subscriptions, Anthropic says

Multiple high-risk incidents and active exploitations were reported across enterprise and government environments. Key stories: novel OAuth-based MFA bypass techniques dubbed ConsentFix and ClickFix are rapidly stealing Microsoft 365 tokens via fake prompts and social-engineered OAuth flows; CISA warns of active exploitation of a high-severity Microsoft SharePoint RCE patched in May; Cisco confirmed active exploitation of a recently patched Unified Communications Manager (Unified CM) flaw; the FortiBleed credential-theft campaign has been linked to INC/Lynx ransomware actors, suggesting stolen