In code we trust? Why the most trusted software receives the least scrutiny.

Sophos published a series of security and product updates. Key security items: a blog highlighting that highly trusted code is often under-scrutinized — citing recent CVE activity across GitHub, Anthropic, Google, dbt, and MISP and warning that connecting AI agents to production systems creates new attack paths; Sophos announced it joined Anthropic’s Project Glasswing to use Claude Mythos 5 for proactive vulnerability discovery; and critically, Sophos reported SonicWall SMA1000 vulnerabilities are being actively exploited (urgent concern for SMA1000 customers and perimeter devices). Other non-