Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
2026-11-10T13:24:00Z•80c9a93c7f13bfe8b77b411ab9a56ab65d97b578837b491a14ee5b67c7b6d7b7
CVE-2026-116779CVE-2026-123218CISA KEVChromeIBM Aspera FaspexIranian threat actorN-able N-centralOpenSSHPlex Media ServerQNAP NASSSHoleSignalWire FreeSWITCHactive exploitationauthentication bypasscredential theftdata breachpro-Russian hackersremote code executionzero-day
What happened
SecurityWeek RSS items report active exploitation of multiple vulnerabilities, including an exploited Chrome XML use-after-free, OpenSSH authentication bypass (“SSHole”), QNAP Plex Media Server exploit chains, and IBM Aspera Faspex and SignalWire FreeSWITCH flaws added to CISA KEV. Additional items cover N-able N-central zero-days, major data breaches, and nation-state-attributed cyberattacks. The most urgent risks involve vulnerabilities under active exploitation and internet-facing infrastructure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 80c9a93c7f13bfe8b77b411ab9a56ab65d97b578837b491a14ee5b67c7b6d7b7
- Enrichment time
- 2026-11-10T13:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.