All days of the daily brief

Daily brief · 2026-10-12

New incidents (4), most serious first

1. Fideuram (Intesa Sanpaolo private banking) deepfake voice/video executive impersonation fraud

   Fideuram, the private-banking arm of Intesa Sanpaolo, lost close to 95 million euros after attackers used synthetic voice and video to impersonate senior executives and advisers, convincing internal staff to authorise transfers.

   major · Earliest source we hold 2026-10-12

2. CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents

   CyberXero, a Russian-speaking initial access broker, used Anthropic's Claude Code with 51 specialized agents and PentAGI connected to Cobalt Strike to run an AI-augmented campaign against WordPress, e-commerce and Ukrainian critical infrastructure.

   major · Anthropic · Earliest source we hold 2026-10-12

3. Anthropic Mythos-discovered Rejetto HFS authentication bypass exploited in the wild

   A second vulnerability discovered by Anthropic's Mythos model, a critical authentication bypass in the Rejetto HTTP file server (HFS), has been exploited in the wild, according to a VulnCheck security researcher quoted on a podcast.

   moderate · Anthropic · Earliest source we hold 2026-10-12

4. AI deepfake ads depicting Wisconsin congressional candidate Rebecca Cooke

   Republican Rep.

   minor · xAI · Earliest source we hold 2026-10-12

AI safety: new test results and model versions

• Meta Muse Wonder new model version
• Meta Muse Wonder Full new model version

The register was corrected 1 time this day (merges, retractions and fixed fields). Read the corrections log.