Polymarket suffered a $2.94 million phishing attack affecting at least 11 user wallets due to a malicious script injected via a third-party vendor compromise. The prediction market platform has contained the issue, removed the dependency, and promised full refunds to affected users.
Hackers stole approximately $3 million from Polymarket users by exploiting a compromised third-party vendor. The prediction market platform has fixed the issue and will fully reimburse affected users, marking its second security incident in two months.
A small group in a private Discord channel accessed Anthropic's restricted Mythos AI model on the day it was announced for limited testing. The unauthorized access was achieved through a third-party contractor environment, with users guessing the model's online location based on patterns from earlier Anthropic systems. Anthropic says it's investigating but has no evidence the access extended beyond the vendor environment or impacted its systems.
A private Discord group has reportedly gained unauthorized access to Anthropic's Mythos cybersecurity tool through a third-party vendor, on the same day it was publicly announced. The group, which seeks information about unreleased AI models, used access from a person employed at an Anthropic contractor. Anthropic is investigating but has found no evidence its systems were impacted. Mythos was released to select vendors including Apple as part of Project Glasswing to prevent misuse.
