Tootfinder

heise security Tour 2026: Das Programm steht – jetzt Frühbucherpreis sichern!
Die heise security Tour 2026 fokussiert auf Lieferketten-Sicherheit, Identitäts-Management und KI. Sichern Sie sich jetzt Frühbucher-Tickets!
…

Anthropic's Claude Security, formerly Claude Code Security, is in public beta for Enterprise users; the Opus 4.7-powered tool can scan code for vulnerabilities (Marcus Schuler/Implicator.ai)
https://www.implicator.ai/anthropic-opens-claude-s…

Anthropic Opens Claude Security Beta as Mythos Access Fight Deepens
Anthropic has published Claude Security today as a public beta for Claude Enterprise customers, turning a February research preview into a product for code scanning and patch workflows. It scans repositories, validates findings, and routes fixes through Claude Code. But the launch lands as the White House pushes back on expanded Mythos access, leaving Anthropic to draw a line between commercial defense and restricted frontier cyber capability for buyers.

Claude Security: Anthropic bringt KI-Schwachstellenscanner für Unternehmen
Anthropic schickt Claude Security in den öffentlichen Beta-Test. Es scannt Code auf Schwachstellen, schlägt Patches vor und soll bei Sicherheit streng sein.

Anthropic startet öffentliche Beta von Claude Security für Unternehmen
Anthropic schickt Claude Security in den öffentlichen Beta-Test. Es scannt Code auf Schwachstellen, schlägt Patches vor und soll bei Sicherheit streng sein.

FBI warns against using Chinese mobile apps due to privacy risks
https://www.bleepingcomputer.com/news/security/fbi-warns-against-using-chinese-mobile-apps-over-to-data-security-risks/

FBI warns against using Chinese mobile apps due to privacy risks
The U.S. Federal Bureau of Investigation (FBI) warned Americans against using foreign-developed mobile applications, particularly those created by Chinese developers.

It's always important to have a consistent #security policy.
For example, a policy of "If somebody filed a CVE, it's an important security issue, and we will fix it as such, no matter how meaningless the fix is. If nobody did, it's just a glorified bug fix, no matter how serious the bug was."
So we've just seen a #pip security release over "installing random packages can overwrite pip's files and pip can lazy-import some of them immediately afterwards", with a fix of "pip will no longer load them until you run it again" (leaving the underlying security issue of "any #Python package can override files installed by any other Python package" as intended behavior). As Eli Schwartz beautifully put it, you are not expected to be using the virtual environment; you should create it, install packages into it (at most once!), and then frame it and put it on the wall to admire.
Now we're seeing a "bug fix" for "malicious entry point names can write outside of virtual environment". If nobody filed a CVE, it's obviously not a security issue at all. At least upstream graced us with fixing it without correcting the spec to forbid that first.
https://github.com/pypa/pip/issues/14000

"All right, the president and yourself have been, had such courage in terms of doing things that past presidents, past treasury secretaries would not do. I mean, it's countless and because, I mean, if we're continuing to spend all this money on Medicare, Medicaid, Social Security, we won't have any money left to spend on anything else, right?"
Bartiromo Wants To Destroy Social Security To Pay For Forever Wars | Crooks and Liars
https://crooksandliars.com/2026/05/bartiromo-wants-destroy-social-security

Grab says it commits to "Taiwan's data security and public trust", after reports of Grab's collaborations with China's Huawei and Alibaba sparked concerns (Kentaro Takeda/Nikkei Asia)
https://asia.nikkei.com/business/techn

Grab seeks to ease data security concerns as it pushes into Taiwan
Foodpanda acquisition faces scrutiny over Huawei-linked mapping system

5G-Sicherheitsnetz: Bund besiegelt Aus für Huawei und ZTE bis 2029
Verträge mit Telekom, Vodafone und Telefónica zwingen die Mobilfunknetzbetreiber zum Austausch kritischer Technik aus China in Kern- und Managementsystemen.

The FBI warns of rising cyber cargo theft, where attackers hack freight brokers' accounts and dupe carriers; 2025 cargo theft losses in N. America rose 60% YoY (Pierluigi Paganini/Security Affairs)
https://securityaffairs.com/191556/cyb

Digital attacks drive a new wave of cargo theft, FBI says
FBI warns of rising cyber cargo theft, with hackers targeting brokers and carriers. Digital attacks are replacing traditional cargo theft.

Rekord-Finanzierung: OpenAI sichert sich 122 Milliarden US-Dollar für KI-Ausbau
Mit 122 Milliarden US-Dollar schließt OpenAI eine der größten Finanzierungsrunden der Geschichte ab und verschafft sich finanziellen Spielraum im KI-Wettlauf.