# Archive
Browse past daily curated stories
Monday, June 15, 2026
-
1BleepingComputer generalFBI disrupts massive AI-powered phishing service using a million URLs
The FBI, in coordination with Google and Black Lotus Labs, dismantled 'Outsider Enterprise,' a Chinese phishing-as-a-service platform operating approximately one million phishing URLs designed to harvest credit card data and credentials. The operation represents a significant cross-sector law enforcement and private industry takedown of AI-powered phishing infrastructure. Security practitioners should review exposure to this threat actor's infrastructure, as indicators from Black Lotus Labs are likely forthcoming.
-
2SecurityWeek generalNPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks
NPM 12 will change the default behavior of 'npm install' to block automatic script execution from dependencies, a significant hardening measure targeting a well-documented supply chain attack vector. Developers and security teams managing JavaScript pipelines will need to explicitly allowlist packages requiring install scripts. This addresses a long-standing risk class exploited in attacks such as the event-stream compromise and numerous malicious npm package campaigns.
-
3SecurityWeek generalAnthropic Says It Has Taken Its Latest AI Models Offline to Comply With New Export Controls
Anthropic has taken its Fable 5 and Mythos 5 AI models fully offline globally to comply with a Trump administration Commerce Department export control directive barring access by foreign nationals. The directive was reportedly triggered by a jailbreak capability identified in the models, which Anthropic characterized as narrow and widely replicable elsewhere. The action sets a precedent for government-mandated AI model shutdowns under national security export control frameworks.
-
4BleepingComputer generalUS Gov asks Anthropic to ban 'foreign national' access to Fable, Mythos
The US government ordered Anthropic to block all foreign national access to Fable 5 and Mythos 5, citing national security concerns tied to a specific jailbreak vulnerability, prompting a worldwide suspension of both models. Anthropic is complying under protest, arguing the cited jailbreak is narrow in scope and that comparable capabilities exist in other publicly available models. This case illustrates how AI export controls may increasingly function as de facto product kill switches.
-
5CyberScoop generalAnthropic disables new models after government calls them a national security concern
The US Commerce Department's expert control decree compelled Anthropic to shut off worldwide access to Fable 5 and Mythos 5 after designating them a national security concern, drawing criticism from researchers and industry analysts. The action represents an early test of AI-specific export control mechanisms being applied to commercially deployed large language models. Security and compliance teams at AI vendors should monitor evolving Commerce Department guidance for similar regulatory exposure.
-
6BleepingComputer generalEx-school district employee jailed for hacks on former employer
A former IT employee of an Iowa school district was sentenced to 21 months in federal prison for conducting a prolonged unauthorized cyberattack against his former employer, including deleting accounts and disrupting classroom operations causing tens of thousands of dollars in damages. The case underscores the insider threat risk posed by departing IT staff with residual privileged access to school district systems. Organizations should audit and promptly revoke access credentials upon employee termination.
-
7Schneier on Security threat-intelUpcoming Speaking Engagements
Bruce Schneier has published his upcoming speaking schedule, including a keynote at Cybernation 2026 in Berlin on June 24, 2026, a talk at the Hasso Plattner Institut Potsdam Conference on National Cybersecurity on the same date, and a panel at the Austrian Institute for International Affairs in Vienna on June 25, 2026. No technical security content is presented; this is a scheduling announcement. Of limited editorial value beyond awareness of upcoming public policy and security discussions.
-
8Ars Technica Security generalReview: Disclosure Day is big on action, light on ideas
Ars Technica published a review of 'Disclosure Day,' a film described as action-heavy but lacking originality, attributed to a notable director. The article contains no cybersecurity technical content, threat intelligence, or practitioner-relevant information. Not relevant to the security community.
-
9Ars Technica Security generalDid a medieval flying monk spot Halley's comet, twice? It's complicated
A University of Leicester historian argues that Eilmer of Malmesbury, an 11th-century monk, may have observed two distinct comets in 1018 and 1066 rather than a single sighting of Halley's Comet. This article has no relevance to cybersecurity. Included only to fulfill the selection count requirement.
-
10Ars Technica Security generalThreads of underground fungal networks are long enough to reach beyond the Solar System
Researchers published a global quantification of arbuscular mycorrhizal fungal network length and mass, finding the networks extend distances exceeding the span of the Solar System. This article has no cybersecurity relevance whatsoever. Included only to fulfill the selection count requirement.