<p><strong>TLDR:</strong> The US government issued an export control directive forcing Anthropic to suspend access to Claude Fable 5 and Mythos 5 for foreign nationals, citing a claimed jailbreak — Anthropic complied but publicly disputed the severity. Meanwhile, CVE-2026-50751, a CVSS 9.3 authentication bypass in Check Point Remote Access VPN, was exploited in the wild for 32 days before a patch landed, with at least one confirmed Qilin ransomware deployment. The AUR supply chain attack from yesterday’s digest has grown significantly — what started at 400+ packages now exceeds 1,500 compromised packages, with an eBPF rootkit component making cleanup harder than a simple credential rotation. Oracle PeopleSoft CVE-2026-35273 also has a full patch now, with Mandiant confirming the ShinyHunters campaign deployed MeshCentral agents disguised as Azure services for persistence.</p>
<hr>
<h2>US export control directive suspends Anthropic Fable 5 and Mythos 5 globally</h2>
<p>The US government ordered Anthropic to disable Claude Fable 5 and Mythos 5 for all foreign nationals under an export control directive, citing national security concerns over a claimed jailbreak. Anthropic complied but pushed back publicly, arguing the jailbreak is narrow and non-universal, that comparable capabilities exist in GPT-5.5, and that applying this standard industry-wide would effectively halt all frontier model deployments. The move is particularly pointed given that Anthropic’s own cautious safety messaging around Mythos — kept tightly restricted due to its ability to find security vulnerabilities — appears to have drawn the scrutiny that triggered the shutdown. The IMF’s managing director separately warned that models like Mythos ‘can be used to destroy the financial system,’ adding institutional weight to the government’s position. <a href="https://app.daily.dev/feed-by-ids?id=Z3HeUFWn5&amp;id=J1DAifeeY&amp;id=AxmTYvV7X&amp;id=hADCUfAIF&amp;id=tLPJL0FzO" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Check Point VPN CVE-2026-50751: IKEv1 auth bypass exploited for 32 days, Qilin ransomware confirmed</h2>
<p>CVE-2026-50751 (CVSS 9.3) lets an attacker flip a bitmask in a client-supplied IKEv1 Vendor ID payload to skip all certificate signature verification on Check Point Remote Access VPN gateways. The only prerequisites are a valid username and the gateway’s ICA organization string — both readable from its public TLS certificate. Exploitation started May 7, hotfixes landed June 8, and at least one post-compromise chain ended in Qilin ransomware deployment. Affected versions span R80.20.X through R82.10; end-of-support releases get no hotfix. Apply sk185033, disable legacy IKEv1 client support, enforce IKEv2-only auth, and migrate off end-of-support releases. <a href="https://app.daily.dev/feed-by-ids?id=EhCuOlKNF&amp;id=dcNkf5Kqm" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>AUR malware campaign grows from 400 to 1,500+ packages, eBPF rootkit complicates cleanup</h2>
<p>The Arch User Repository supply chain attack covered in yesterday’s digest has escalated — Arch Linux developers now confirm at least 1,579 compromised packages, up from the initial 400. The malicious npm package atomic-lockfile drops a Rust-based credential stealer targeting SSH keys, GitHub tokens, cloud API keys, browser sessions, and CI secrets. On privileged systems, an optional eBPF rootkit hides processes, files, and network interfaces at the kernel level, meaning standard cleanup won’t work. If you updated AUR packages in the last 48-72 hours, treat the host as compromised: rotate all credentials, rebuild the machine, and don’t restore executables or scripts from backup. <a href="https://app.daily.dev/feed-by-ids?id=74hAcHSVu&amp;id=TCmbPb07W&amp;id=F7ilEeZOk&amp;id=sJN4nbQRi&amp;id=0vEfQnWsb&amp;id=qfoj9yKq1&amp;id=raJUlIB7A" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Oracle PeopleSoft CVE-2026-35273 now has a patch; ShinyHunters used MeshCentral for persistence</h2>
<p>Oracle has released an emergency out-of-band patch for CVE-2026-35273 (CVSS 9.8) covering PeopleTools 8.61 and 8.62. Mandiant’s full analysis of the ShinyHunters campaign confirms attackers deployed MeshCentral RMM agents disguised as Microsoft Azure services for persistent remote control after initial access. The exploit chain targets PSEMHUB and PSIGW endpoints and can trigger outbound SMB connections to capture NetNTLM hashes. Patch immediately, audit for unexpected MeshCentral installations, check for the published IOCs including C2 IPs and file hashes, and enable behavioral monitoring. <a href="https://app.daily.dev/feed-by-ids?id=tYz4dEMr3&amp;id=fyTDsgnOy&amp;id=rBusiRS36" target="_blank" rel="noopener nofollow">Read more</a></p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Agentjacking: fake Sentry error reports hijack Claude Code, Cursor, and Codex with 85% success rate:</strong> Tenet Security disclosed an attack that injects malicious commands into fake Sentry error reports via Sentry’s publicly accessible DSN endpoint; when an AI coding agent reads Sentry issues via MCP and executes the embedded command, it runs with the developer’s own privileges — bypassing EDR, firewalls, and IAM entirely — and the attack succeeded against Claude Code, Cursor, and Codex across 2,388 exposed organizations. <a href="https://app.daily.dev/posts/uKMYEprBD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google sues Outsider Enterprise: 9,000 fake sites, 2.5M scam texts, Gemini used to write phishing code:</strong> Google filed a civil lawsuit against the alleged Chinese cybercrime ring Outsider Enterprise, which used Gemini to generate phishing site code, deployed 1 million fraudulent domains, and is estimated to have enabled theft of 3.87 million credit cards and roughly $1.9 billion in losses since July 2023. <a href="https://app.daily.dev/feed-by-ids?id=qIGYiLIhp&amp;id=eAmLFUU0u&amp;id=WmRlXpM0L&amp;id=V49SWV96X" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>phpBB auth bypass lurked for 10 years, patched in 3.3.17, no fix yet for 4.x branch:</strong> A decade-old authentication bypass in all phpBB 3.x versions through 3.3.16 lets an attacker log in as any user including admins with a single HTTP request; phpBB patched it in 3.3.17 on June 6th but the 4.x branch (up to 4.0.0-a2) remains unpatched. <a href="https://app.daily.dev/posts/khey5ws8C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Trail of Bits recovers 603 RSA private keys from ‘short-sleeve’ keys caused by CompleteFTP type mismatch bug:</strong> A type mismatch in CompleteFTP versions 10.0.0–12.0.0 left most bits of RSA key material zero, and Trail of Bits’ polynomial factoring technique recovered 603 unique RSA private keys and 74 DSA private keys from internet scans; CompleteFTP v26.1.0 now auto-detects vulnerable keys. <a href="https://app.daily.dev/posts/u8uFoqxQQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tchap breach exposes 73,000 French government employees via social engineering, not crypto flaw:</strong> An attacker compromised a Tchap account in the education sector through social engineering, accessing unencrypted public chat rooms and allegedly exfiltrating 643,000+ messages, 13.5 GB of files, and hardcoded LDAP credentials found in a PowerShell script from France’s mandatory government messaging platform. <a href="https://app.daily.dev/feed-by-ids?id=ClVq3xzs5&amp;id=sIiALXECa" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>


CVE disclosures, supply-chain attacks, security incidents, and developer-facing security tooling.

Security Digest

A security digest covering four major incidents: the US government forced Anthropic to suspend Claude Fable 5 and Mythos 5 for foreign nationals under export controls citing a jailbreak; CVE-2026-50751, a CVSS 9.3 IKEv1 auth bypass in Check Point Remote Access VPN, was exploited for 32 days before patching with confirmed Qilin ransomware deployment; an AUR supply chain attack escalated from 400 to 1,500+ compromised packages featuring a Rust credential stealer and eBPF rootkit; and Oracle released an emergency patch for PeopleSoft CVE-2026-35273 (CVSS 9.8) with Mandiant confirming ShinyHunters used MeshCentral agents disguised as Azure services for persistence. Notable items include an 'agentjacking' attack targeting AI coding agents via fake Sentry reports, a Google lawsuit against a Chinese cybercrime ring using Gemini for phishing, a decade-old phpBB auth bypass, and 603 RSA private keys recovered from a CompleteFTP bug.

US bans Anthropic's Mythos and Fable models, Check Point VPN IKEv1 bypass exploited by Qilin