CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

SecurityWeek roundup: CISA’s Attack Surface Evaluation team is reportedly using Anthropic’s Mythos to scan government software for flaws. A critical Adobe ColdFusion vulnerability (CVE-2026-48282, CVSS 10.0) is being actively exploited. A long‑standing Linux KVM “Januscape” flaw enables VM escape on Intel/AMD hosts. Iran-linked actors and Armored Likho are using modular C2 frameworks and compromised service providers to reach high-value targets (including electric power entities). North Korea’s PolinRider campaign has compromised open-source packages in supply‑chain attacks, and Securonix has曝