All news with #anthropic tag

🆕 Two new Anthropic models, Claude Opus 5.5 and Claude Sonnet 5.5, are now available in the Kiro IDE and CLI for AWS GovCloud (US) Regions. Opus 5.5 offers higher capability for long-running agentic coding with ~40% fewer tool calls and roughly half the tokens versus Opus 5, available with a 1M context window and 2.0x credit multiplier. Sonnet 5.5 is faster—>30% throughput improvement—with improved clarity and a 1.3x credit multiplier. Update your IDE/CLI to access the new models and consult GovCloud documentation or your AWS account team for details.

🛡️ Anthropic introduced OSS Scanner, an opt-in AI-driven vulnerability scanner for open-source projects that provides periodic security scans at no cost. Outputs are fully model-generated, using top models like Claude Mythos, and maintainers enroll via a GitHub pull request and YAML configuration including a Dockerfile for offline analysis. Anthropic has already flagged thousands of candidate issues and reported many to maintainers, while also launching a Critical Infrastructure Defense Program.

🛡️ CrowdStrike attributes a late-September to early-October campaign to a suspected China-based actor who used open-source agentic tooling ARTEX and Anthropic’s Claude to identify vulnerabilities and exfiltrate data from South Korean financial firms. The attacker hosted ARTEX and Claude Code artifacts on attacker-controlled IPs and supplemented with multiple LLM backends. Victims include Shinhan Bank and Yegaram Savings Bank, prompting a consumer alert from South Korea’s Financial Services Commission.

🔒 Cloudflare introduces an agentic security operations harness that uses multiple AI agents and deterministic reconnaissance to reduce analyst workload and speed alert triage. The Managed Defense AI harness aggregates evidence, employs Clef for decision scoring, and leverages approved OpenAI Daybreak and Anthropic models for deeper analysis. Specialist agents run in parallel with constrained scopes to avoid hallucinations, while application code enforces data collection, provenance, and reproducibility. The system produces advisory reports, preserves evidence and gaps, and keeps analysts responsible for final decisions.

🚀 Claude Haiku 5.5 is now available on AWS, offering the fastest and most efficient model in the Haiku 5.5 family designed for subagents and high‑volume, cost‑sensitive workloads. Anthropic reports Haiku 5.5 costs about 75% less than Haiku 4.5 for many tasks while improving performance across coding, tool use, agents, and classification. Customers can access Haiku 5.5 via Amazon Bedrock for AWS‑resident deployments or via the Claude Platform on AWS for the native Anthropic experience integrated with AWS billing and authentication.

🔒 AWS GovCloud (US) now offers Claude Haiku 5.5, Anthropic’s fastest and most efficient Haiku model, optimized for subagents and high-volume, cost-sensitive workloads. According to Anthropic, it reduces costs by about 75% compared to Haiku 4.5 for many tasks. Haiku 5.5 introduces effort controls for tuning cost versus intelligence and is suited for real-time experiences and large-scale classification, summarization, and extraction jobs. Amazon Bedrock provides access while keeping data within AWS regional infrastructure and offers AWS-managed features like Guardrails and Knowledge Bases.

🛡️ Anthropic has expanded its Cyber Verification Program to give vetted security teams tiered access to advanced AI models with reduced safeguards. The program now includes Defense, Red Team, and Specialized Access tiers for progressively broader cybersecurity testing and defensive work. Anthropic tested tiers using CyScenarioBench and says results demonstrate why authorization, scope, and external controls matter.

🔒 Anthropic is expanding a program that lets vetted cybersecurity professionals test advanced AI models with reduced safeguards, reporting Project Glasswing uncovered at least 129,000 verified vulnerabilities between April and July 2026 and another 5,500 through open-source scans through October. The new Cyber Verification Program (CVP) offers three tiers—Defense, Red Team, and Specialized Access—providing graduated model access including Claude Opus 5.5 and Claude Mythos 5.1. Anthropic says these capabilities will help defenders while acknowledging dual-use risks and uneven exploitability of discovered flaws.

🔒 Cybersecurity researchers disclosed a human-operated phishing platform impersonating AI ad products like Google Gemini, Anthropic Claude, and OpenAI ChatGPT. The sites lure targets with ad-management pitches and use a browser-in-the-browser (BitB) trick to present spoofed login windows that capture credentials and MFA codes. Operators fingerprint devices, relay victim inputs over Socket.IO, and select subsequent MFA challenges to complete account takeovers. The campaign surfaced pages such as museads.ai and leverages fake invitation emails, shared technology stacks, and misconfigured GitHub repos to scale attacks.

🔐 The article examines calls by Anthropic CEO Dario Amodei and other tech leaders to slow development of frontier AI, weighing sensational extinction scenarios against practical cybersecurity concerns. It highlights resignations from researchers and political pushback while arguing that the real danger is rushed deployment of untested agentic systems into production. The piece urges measured oversight, rigorous testing, and clear responsibility for infrastructure and security providers.

🔎 Researchers report active probes targeting CVE-2026-61500 in Rejetto HFS, a session-cookie signing weakness that can enable account takeover and remote code execution. Horizon3 linked discovery to Anthropic's Mythos model and released a PoC, prompting small-scale scans from a China Telecom IP. Administrators are urged to upgrade to Rejetto HFS 3.2.1 or preferably 3.3.4 to mitigate exploitation.

🎙️ Anthropic now prompts Claude voice users to voluntarily allow their audio recordings and voice chat data to be used to improve its AI models. The prompt appears when using voice features and the option is off by default, with a dedicated toggle in Settings > Privacy. Voice training is handled separately from chat and code training, and users can toggle permission or delete stored voice data at any time.

🛡️ TA419, a China-aligned cyber espionage group, has run credential phishing campaigns aimed at U.S. AI policy experts at think tanks, universities, and law firms. The actor impersonated economists, policymakers, and an Anthropic employee to phish victims via shortened links that redirect to an OneDrive adversary-in-the-middle (AitM) page using a Frameless BitB technique. Proofpoint links this activity to broader Chinese intelligence objectives amid U.S.–China AI tensions.

📰 New campaign finance disclosures reveal how US federal and state political campaigns are adopting AI tools and what they report spending. Itemized FEC data back to 2020 shows at least $17 million disclosed across hundreds of campaigns, while four state datasets (California, Colorado, Massachusetts, Washington) detail more localized adoption since 2022. Major vendors like OpenAI, Anthropic and niche political platforms such as AmplifAI, Daisychain and Campaign Nucleus feature prominently in filings, with distinct partisan usage patterns and most spending concentrated via consultants and outside groups.

🛈 Amazon Web Services now offers in-region support for Anthropic's Claude Opus 5.5 and Claude Sonnet 5 on Amazon Bedrock in the UK (London) Region. Customers in regulated industries such as financial services, healthcare, and the public sector can perform inference while keeping data processing confined to the eu-west-2 Region. Calls to the bedrock-runtime endpoint ensure requests and processing remain within the Region. See the Bedrock User Guide for current regional model availability and the Bedrock console to get started.

📄 The White House has obtained a voluntary safety commitment from six leading AI firms, who agreed to internal controls, independent audits and board-level oversight for frontier models. President Trump and the executives signed the White House Accord on Super Intelligence on September 29. Signatories include leaders from Google, Anthropic, Meta, OpenAI, xAI and NVIDIA. The accord outlines four layers of controls and calls for regular meetings to develop standards and best practices.

🚀 Amazon Bedrock now offers Anthropic's Claude Opus 5, Claude Sonnet 5, and Claude Haiku 4.5 in India, Claude Opus 5 and Claude Sonnet 5 in South Korea, and Claude Sonnet 5 in Singapore. These deployments enable customers in regulated industries to keep inference and data processing within-country using in-region or geographic cross-Region inference. In India, endpoints run across Mumbai and Hyderabad Regions; South Korea and Singapore support in-region bedrock-runtime endpoints.

🚀 AWS now offers Claude Sonnet 5.5, a smarter and more efficient Sonnet that advances coding and knowledge work at lower cost per task and faster speeds. The model is an upgrade from Sonnet 5, improving coding assistance for feature development, verification, and well-scoped tasks while producing ready-to-share knowledge outputs like summaries, diagrams, and edits. Customers can access Sonnet 5.5 through Amazon Bedrock for AWS-resident data and managed features, or via Claude Platform on AWS for the native Anthropic experience with unified billing and authentication.

🤖 AWS GovCloud (US) now offers Claude Sonnet 5.5, a smarter and more efficient model that improves coding and knowledge-work performance at lower cost per task and faster speeds. Sonnet 5.5 is an upgrade from Sonnet 5, better suited for coding workflows like building, fixing, and verifying features, and for producing shareable outputs such as 1‑pagers, diagrams, slides, document edits, and spreadsheet cleanup. Available via Amazon Bedrock, Sonnet 5.5 keeps data within AWS infrastructure, supports regional data residency, and is accessed through a unified service with AWS-managed features like Guardrails and Knowledge Bases.

🧭 Anthropic has launched the public Claude Marketplace, aggregating plugins, connectors, agents, and partner products in one location. The marketplace already lists more than 2,000 offerings from vendors including Atlassian, Google, Microsoft, Notion, and Salesforce. Companies can also buy Claude-powered agents and services from partners such as CrowdStrike, Snowflake, and consulting firms like Accenture and Deloitte. Developers can publish connectors and plugins using MCP and Agent Skills to reach Claude customers.