New Fathom It

Crypto ATM scams cost Americans $388M in 2025.

For small businesses, the lesson is broader: fraud succeeds when people are rushed, isolated, and told to bypass normal payment channels.

Train your team: verify odd payment requests before money moves. https://bit.ly/3Rp1kjm

FBI: Americans lost over $388 million to scams using crypto ATMs in 2025 The FBI says Americans have lost over $388 million last year to scams using cryptocurrency kiosks, also known as crypto ATMs or Bitcoin ATMs.

Cybersecurity has had 20 years of “wake-up calls.” Breaches, ransomware, outages, cloud failures, vendor mistakes. For small businesses: don’t build around perfect prevention. Build for resilience: backups, MFA, patching, vendor review, and recovery plans.https://bit.ly/3PofdxJ

The Mythos hype may be bigger than the breakthrough.

If multiple AI tools can find software flaws, the real takeaway for small businesses is practical: attackers will move faster, so patch faster, reduce exposed systems, and don’t let old software linger.https://bit.ly/435ktJB

OpenAI's GPT-5.5 is as Good as Mythos at Finding Security Vulnerabilities - Schneier on Security The UK’s AI Security Institute evaluated GPT-5.5’s ability to find security vulnerabilities, and found that it is comparable to Claude Mythos. Note that the OpenAI model is generally available. Here is the Institute’s evaluation of Mythos. And here is an analysis of a smaller, cheaper model. I...

BitLocker matters, but it should not be the only wall around your files.

For small businesses, this zero-day is a reminder to use device encryption, least-privilege access, sensitivity labels, rights management, and remote wipe. https://bit.ly/4eLsfj1

Mystery Microsoft bug leaker keeps the zero-days coming Security pros warn YellowKey claim could make stolen laptops a much bigger problem

Anthropic’s Mythos is being called more marketing ploy than security breakthrough.
For small businesses, the lesson is worth noting: AI tools can be useful, but vendor hype should not replace testing, judgment, or expert review.

https://bit.ly/4nqjcpR

Anthropic’s bug-hunting Mythos was greatest marketing stunt ever, says cURL creator After all that hype, AI scanner found one low-severity cURL flaw

A US bank reported itself after customer data was entered into an unauthorized AI app.

For small businesses, this is the lesson: have a clear AI use policy before employees improvise with sensitive data.

AI tools need guardrails, not guesswork. https://bit.ly/4fcrzDu

US bank reports itself after slinging customer data at 'unauthorized AI app' Volume and sensitivity of the data cited as chief concerns

Google says AI-powered hacking is moving fast, including attempts to find and exploit unknown flaws.

For small businesses, this is not a reason to panic. It is a reason to tighten the basics: MFA, patching, backups, logging, and least-privilege access.
https://bit.ly/4fexmsa

AI-powered hacking has exploded into industrial-scale threat, Google says Criminal groups and state-linked actors appear to be using commercial models to refine and scale up attacks

60% of MD5 password hashes can reportedly be cracked in under an hour.
For small businesses, this is a reminder that passwords alone are not enough. Use MFA, strong password policies, and identity monitoring.
Security should not depend on one locked door. https://bit.ly/4uy5T9a

60% of MD5 password hashes are crackable in under an hour Happy World Password Day! Maybe it's finally time to kill this holiday in favor of World No-More-Passwords Day?

Dirty Frag is a new Linux flaw with a public root exploit and no patch yet.

For small businesses, the takeaway is simple: know where Linux runs, including servers, firewalls, NAS devices, and hosted workloads.

Security starts with inventory.

https://bit.ly/42w5aJR

'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit Broken disclosure embargo left admins facing a fresh root-level flaw with no CVE

Claude Mythos found 271 zero‑day vulnerabilities in Firefox, all patched in Firefox 150.
No new classes of bugs—just AI operating at a speed and scale human teams can’t match.
If patches ship fast, the balance finally shifts to defenders.
https://bit.ly/4tCZ71V

Claude Mythos Has Found 271 Zero-Days in Firefox - Schneier on Security That’s a lot. No, it’s an extraordinary number: Since February, the Firefox team has been working around the clock using frontier AI models to find and fix latent security vulnerabilities in the browser. We wrote previously about our collaboration with Anthropic to scan Firefox with Opus 4.6, wh...