{ "schema_version": 3, "report_contract_version": 5, "report_plan": { "control_implications": [ { "control_id": "vulnerability_management", "evidence_excerpt": "Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software", "evidence_origin": "content", "focus": "Atlassian Data Center products", "priority": "high", "source_ids": [ 7 ] }, { "control_id": "access_management", "evidence_excerpt": "The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. \"The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat", "evidence_origin": "content", "focus": "Fortinet FortiGate firewalls", "priority": "high", "source_ids": [ 6 ] }, { "control_id": "incident_response", "evidence_excerpt": "Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach", "evidence_origin": "content", "focus": "backup infrastructure", "priority": "medium", "source_ids": [ 3 ] }, { "control_id": "vulnerability_management", "evidence_excerpt": "A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads", "evidence_origin": "content", "focus": "exposed AI services", "priority": "medium", "source_ids": [ 2 ] }, { "control_id": "data_protection", "evidence_excerpt": "Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data", "evidence_origin": "content", "focus": "personally identifiable data", "priority": "medium", "source_ids": [ 11 ] }, { "control_id": "governance", "evidence_excerpt": "The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. For years, the enterprise cybersecurity story has been told as a straight line of escalation: more attacks, more data loss, more pressure, and more urgency. That", "evidence_origin": "content", "focus": "AI governance, human risk, and board scrutiny", "priority": "low", "source_ids": [ 5 ] } ], "executive_brief": { "decision_frame": "separate", "source_ids": [ 7, 6, 3 ] }, "industry_impacts": [], "regulatory_changes": [] }, "generated_at": "2026-10-08T00:28:22.608553Z", "feed_url": "https://ricomanifesto.github.io/SentryDigest/feed.xml", "feed_home_url": "https://ricomanifesto.github.io/SentryDigest/", "digest_issue_date": "2026-10-07", "digest_issue_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/", "requested_model": "openrouter/nvidia/nemotron-3-ultra-550b-a55b:free", "resolved_model": "nvidia/nemotron-3-ultra-550b-a55b:free", "sources": [ { "title": "Hackers exploit critical Atlassian flaw after public PoC release", "url": "https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-4e5e4a2f6d27", "cves": [ "CVE-2026-21589" ], "snippet": "Hackers exploit critical Atlassian flaw after public PoC release A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication… A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…", "text": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…" }, { "extraction_version": 1, "origin": "content", "raw_text": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…", "text": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…" } ], "effective_date_evidence": null }, { "title": "PoeLLM malware infects exposed AI servers in cryptomining attacks", "url": "https://www.bleepingcomputer.com/news/security/poellm-malware-infects-exposed-ai-servers-in-cryptomining-attacks/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-3c3ca0f12e61", "cves": [], "snippet": "PoeLLM malware infects exposed AI servers in cryptomining attacks A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads… A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads…", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads…", "text": "A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads…" }, { "extraction_version": 1, "origin": "content", "raw_text": "A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads…", "text": "A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads…" } ], "effective_date_evidence": null }, { "title": "Ransomware has a new target. Is your backup ready?", "url": "https://www.bleepingcomputer.com/news/security/ransomware-has-a-new-target-is-your-backup-ready/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-69f65ecd6d96", "cves": [], "snippet": "Ransomware has a new target. Is your backup ready? Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach… Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach…", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach…", "text": "Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach…" }, { "extraction_version": 1, "origin": "content", "raw_text": "Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach…", "text": "Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach…" } ], "effective_date_evidence": null }, { "title": "ShinyHunters Extorted Boeing Spin-off Prior to Arrests", "url": "https://krebsonsecurity.com/2026/10/shinyhunters-extorted-boeing-spin-off-prior-to-arrests/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-2c4e6a4177d1", "cves": [], "snippet": "ShinyHunters Extorted Boeing Spin-off Prior to Arrests A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle \"Rey,\" was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey's father -- Royal Jordanian Airlines. A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters h", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle \"Rey,\" was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey's father -- Royal Jordanian Airlines.", "text": "A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle \"Rey,\" was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey's father -- Royal Jordanian Airlines." }, { "extraction_version": 1, "origin": "content", "raw_text": "A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle \"Rey,\" was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey's father -- Royal Jordanian Airlines.", "text": "A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle \"Rey,\" was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey's father -- Royal Jordanian Airlines." } ], "effective_date_evidence": null }, { "title": "The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow", "url": "https://thehackernews.com/2026/10/the-sixth-voice-of-ciso-data-shows.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-a1f84e38ce83", "cves": [], "snippet": "The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. For years, the enterprise cybersecurity story has been told as a straight line of escalation: more attacks, more data loss, more pressure, and more urgency. That… The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. F", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. For years, the enterprise cybersecurity story has been told as a straight line of escalation: more attacks, more data loss, more pressure, and more urgency. That…", "text": "The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. For years, the enterprise cybersecurity story has been told as a straight line of escalation: more attacks, more data loss, more pressure, and more urgency. That…" }, { "extraction_version": 1, "origin": "content", "raw_text": "The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. For years, the enterprise cybersecurity story has been told as a straight line of escalation: more attacks, more data loss, more pressure, and more urgency. That…", "text": "The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. For years, the enterprise cybersecurity story has been told as a straight line of escalation: more attacks, more data loss, more pressure, and more urgency. That…" } ], "effective_date_evidence": null }, { "title": "FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials", "url": "https://thehackernews.com/2026/10/fbi-warns-fortibleed-remains-active.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-98f167473783", "cves": [], "snippet": "FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. \"The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat… The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewa", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. \"The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat…", "text": "The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. \"The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat…" }, { "extraction_version": 1, "origin": "content", "raw_text": "The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. \"The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat…", "text": "The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. \"The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat…" } ], "effective_date_evidence": null }, { "title": "Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details", "url": "https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-b144badd2c91", "cves": [ "CVE-2026-21589" ], "snippet": "Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software… Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file acces", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software…", "text": "Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software…" }, { "extraction_version": 1, "origin": "content", "raw_text": "Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software…", "text": "Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software…" } ], "effective_date_evidence": null }, { "title": "What Is Agentic Pentesting? What It Proves, and Where It Stops.", "url": "https://thehackernews.com/2026/10/what-is-agentic-pentesting-what-it.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-b3468b5f887d", "cves": [], "snippet": "What Is Agentic Pentesting? What It Proves, and Where It Stops. If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth pressure testing, and three questions do the heavy lifting. What can the assessment actually… If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promi", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth pressure testing, and three questions do the heavy lifting. What can the assessment actually…", "text": "If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth pressure testing, and three questions do the heavy lifting. What can the assessment actually…" }, { "extraction_version": 1, "origin": "content", "raw_text": "If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth pressure testing, and three questions do the heavy lifting. What can the assessment actually…", "text": "If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth pressure testing, and three questions do the heavy lifting. What can the assessment actually…" } ], "effective_date_evidence": null }, { "title": "SonicWall warns of max severity SSRF flaw in SMA1000 gateways", "url": "https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-max-severity-ssrf-flaw-in-sma1000-gateways/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-a4a095890425", "cves": [], "snippet": "SonicWall warns of max severity SSRF flaw in SMA1000 gateways SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances… SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances…", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances…", "text": "SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances…" }, { "extraction_version": 1, "origin": "content", "raw_text": "SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances…", "text": "SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances…" } ], "effective_date_evidence": null }, { "title": "Musician sent to prison for $10 million streaming fraud using AI bots", "url": "https://www.bleepingcomputer.com/news/security/musician-gets-18-months-in-prison-for-10-million-streaming-fraud-using-ai-bots/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-9350b2b555da", "cves": [], "snippet": "Musician sent to prison for $10 million streaming fraud using AI bots A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme… A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme…", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme…", "text": "A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme…" }, { "extraction_version": 1, "origin": "content", "raw_text": "A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme…", "text": "A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme…" } ], "effective_date_evidence": null }, { "title": "Advantest confirms personal information stolen in ransomware attack", "url": "https://www.bleepingcomputer.com/news/security/advantest-confirms-personal-information-stolen-in-ransomware-attack/", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-2b5af208b475", "cves": [], "snippet": "Advantest confirms personal information stolen in ransomware attack Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data… Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data…", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data…", "text": "Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data…" }, { "extraction_version": 1, "origin": "content", "raw_text": "Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data…", "text": "Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data…" } ], "effective_date_evidence": null }, { "title": "Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws", "url": "https://thehackernews.com/2026/10/anthropic-expands-claude-access-for.html", "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-07/#reporting-ecbf8c73de94", "cves": [], "snippet": "Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional… Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the com", "article_evidence": [ { "extraction_version": 1, "origin": "summary", "raw_text": "Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional…", "text": "Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional…" }, { "extraction_version": 1, "origin": "content", "raw_text": "Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional…", "text": "Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional…" } ], "effective_date_evidence": null } ] }