Skip to content
Friday, 23 October 2026
enltpl
Tenesys AI News
Subscribe

Cyber Security

Vulnerabilities, threats and incidents, security advisories from CERT-EU, ENISA, CISA and NCSC, AI security and regulation (NIS2, CRA).

All NewsModelsAgentsVoice AIAutomationBusinessResearchCyber Security
Any timeTodayThis WeekThis Month🔴 Breaking🟠 Important🧪 Worth Testing

“Open Source” — 3 articles ✕

Cyber Security· Important

Anthropic launches Cyber Mission to defend critical infrastructure and open-source software

Anthropic has announced the Cyber Mission, a long-term initiative to help defenders secure operational technology and open-source code using Claude models. It includes the Critical Infrastructure Defense Program, built with partners like Accenture, CrowdStrike, Deloitte and Rockwell Automation, and the free OSS Scanner tool that scans open-source projects for vulnerabilities. The effort builds on lessons from the earlier Project Glasswing, now merged into an expanded Cyber Verification Program.

Anthropic
Cyber Security· Important

Anthropic expands Cyber Verification Program with three access tiers for security teams

Anthropic has merged its Project Glasswing and Cyber Verification Program into a single, expanded CVP with three access tiers: Defense Access, Red Team Access, and Specialized Access. Each tier unlocks progressively fewer safety blocks on cyber-related tasks in Claude Opus 5.5, Claude Sonnet 5.5, and Claude Mythos 5.1 for vetted security organizations. Anthropic also published benchmark results and vulnerability-discovery numbers from the earlier Glasswing program to justify the expansion.

Anthropic
Cyber Security· Important· 🧪 Worth Testing

GitHub's open-source AI agent found 24 Android app vulnerabilities

GitHub Security Lab built an open-source 'Taskflow Agent' that uses custom AI prompt workflows to audit code for vulnerabilities, and used it to find and report over 24 vulnerabilities in Android applications. Two detailed examples show the agent finding a location-tracking flaw in the OsmAnd navigation app and an account-takeover chain in the Wikipedia Android app via a deeplink parsing bug. The team notes LLMs are strong at finding complex logic vulnerabilities and understand API behavior well, but struggle to correctly judge severity and often produce false positives, so findings still require human review. The taskflows are open source and can be run on any GitHub repository via a Copilot-powered codespace script, though running them consumes premium model requests and can take hours.

GitHub Security