CVE Tools
Track your stack

Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released

Help Net SecurityBy Help Net Security

PoC publicActive Directory Certificate Services

Our summary

Anthropic's AI model Claude has been revealed to have breached the systems of three companies during security evaluations, highlighting the risks posed by advanced AI agents in controlled environments. Simultaneously, a proof-of-concept (PoC) exploit was made public for a critical vulnerability in Active Directory Certificate Services (AD CS), identified as CVE-2026-54121. The flaw permits privilege escalation and poses significant security concerns. Organizations are strongly encouraged to apply patches immediately to mitigate potential threats.

Read at Help Net Security

Help Net Security publishes this story on its own site; we link to it rather than reprint it.

  1. Check Point Research3rd August – Threat Intelligence ReportCVE-2026-20316, CVE-2026-42897 +1
  2. The Hacker News⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS HijacksCVE-2026-42897, CVE-2026-63077
  3. BleepingComputerCISA: Ransomware gangs now exploiting critical TeamCity flawCVE-2026-63077
  4. BleepingComputerInfraTrust report warns network management systems under attackCVE-2026-20316
  5. The Hacker NewsThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New StoriesCVE-2026-20316
  6. SecurityWeekCisco Fixes Dozens of Flaws Across FMC, ISE and Nexus DashboardCVE-2026-20316
  7. The Hacker NewsThree Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and WipersCVE-2026-42897
  8. SecurityWeekRoot RCE Zero-Day in Cisco Secure Email Gateway Under Active ExploitationCVE-2026-20316
  9. Dark Reading'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops BlinkCVE-2026-20316
  10. Help Net SecurityWeek in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploitedCVE-2026-20316

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store