Claude Fable 5 isn’t permanently leaving subscriptions, Anthropic says

Multiple high-impact security incidents and active exploitation events were reported: CISA warned of active exploitation of a recently patched Microsoft SharePoint RCE; Cisco confirmed attackers are exploiting a patched Unified Communications Manager flaw; the FortiBleed credential-theft campaign has been linked to INC/Lynx ransomware operators; and DHS confirmed a breach of the HSIN information-sharing platform. New attack techniques (ConsentFix and ClickFix) rapidly hijack Microsoft 365 accounts via OAuth/MFA bypass prompts, and Opera introduced a Paste Protect feature to mitigate ClickFix._