Full Fathom Five: The context of Anthropic's Mythos-class public release

This week bore witness to some interesting events and milestones as Anthropic announced the availability of Claude Fable 5, a descendant of their Mythos Preview model, and Microsoft published their largest Patch Tuesday in history with over 200 vulnerabilities. The two are not unrelated.

Backup retention policy best practices: A complete guide for enterprises

Many organizations invest heavily in backup solutions but still face a critical gap: the absence of a well-defined backup retention policy. Without a structured retention policy, backups may either be stored longer than necessary, driving up costs, or deleted prematurely, increasing compliance risks and limiting recovery options. In critical scenarios like ransomware attacks or system failures, organizations may find that their backups are incomplete, outdated, or unusable.

ThreatSpike Product Updates: May 2026

A lot moved in May. ThreatSpike product updates this month spanned almost every corner of the platform, and a good few the community has been asking for. From port scanning in automated recon, to PDF imports into the Knowledge Base – the list covers a lot of ground. Below is everything that shipped, what it does, and what’s been fixed.

Shadow AI Discovery: How to Find Every AI Agent in Your Environment | Cyberhaven (Part 2 of 4)

Security teams cannot govern what they cannot see. This is Part 2 of Cyberhaven's four-part AI Security product launch series, focused on Shadow AI Discovery and how Cyberhaven automatically inventories every AI app and agent running across your organization.

When an Endpoint Forgets to Ask, "Who Are You?": Inside the ServiceNow June 2026 Data Exposure

On June 5, 2026, ServiceNow quietly pushed a security update to hosted customer instances. The fix, described in an internal knowledge base article, addressed a flaw that let unauthenticated users gain more access to ServiceNow-hosted data than they were ever supposed to have. No password. No credentials. The remediation itself tells the whole story: ServiceNow changed an endpoint configuration to restrict access to authenticated users only. Read that again.

Real-Time AI Enforcement Powered by Data Lineage | Cyberhaven (Part 4 of 4)

Visibility without enforcement is just an alert backlog. This is Part 4 of Cyberhaven's four-part AI Security product launch series, covering how Cyberhaven enforces risk-based controls at the data level, not the tool level, using Data Lineage as the foundation.

CVE-2026-45247: Critical RCE Vulnerability in Mirasvit Cache Warmer

Magento and Adobe Commerce environments often rely on third-party extensions to extend functionality and improve performance. However, these extensions can also introduce security risks that exist outside the core platform. CVE-2026-45247 is a recent example of how vulnerabilities in third-party Magento extensions can create severe security risks.

Agentic AI Visibility and Risk Scoring: What Cyberhaven Sees That Others Miss | (Part 3 of 4)

Knowing an AI tool exists is not the same as knowing what it did with your data. This is Part 3 of Cyberhaven's 4-part AI Security product launch series, covering Agentic AI Visibility and AI Risk IQ, Cyberhaven's evidence-based risk scoring system for every AI app and agent in your environment.