Hermes — Saturday 2 May 2026

1

🔐 security Microsoft Security Blog

77%

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

A high-severity Linux vulnerability, “Copy Fail” (CVE-2026-31431), enables root privilege escalation across cloud environments and Kubernetes workloads. With a working exploit already in the wild, or…

Novelty

80%

Depth

70%

Practical

85%

Surprise

65%

Relevance

85%

https://www.microsoft.com/en-us/security/blog/2026/05/01/cve-2026-31431-copy-fail-vulnerability-enables-linux-root-privilege-escalation/

2

📦 m365 Petri IT Knowledgebase

73%

Microsoft Agent 365 Adds New Tools to Discover and Govern AI Agents

Microsoft has announced the general availability of Agent 365, which first entered preview in November 2025. Alongside the release, the company introduced new capabilities designed to help organizati…

Novelty

75%

Depth

60%

Practical

80%

Surprise

55%

Relevance

95%

https://petri.com/microsoft-agent-365-discover-govern-ai-agents/

3

🔐 security Microsoft Security Blog

72%

Microsoft Agent 365, now generally available, expands capabilities and integrations

Today we’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage shadow AI agents, including local agents like OpenClaw and Claude Code. The pos…

Novelty

75%

Depth

60%

Practical

80%

Surprise

50%

Relevance

95%

https://www.microsoft.com/en-us/security/blog/2026/05/01/microsoft-agent-365-now-generally-available-expands-capabilities-and-integrations/

4

🤖 ai MIT Technology Review – AI

70%

This startup’s new mechanistic interpretability tool lets you debug LLMs

The San Francisco–based startup Goodfire just released a new tool, called Silico, that lets researchers and engineers peer inside an AI model and adjust its parameters—the settings that determine a m…

Novelty

82%

Depth

65%

Practical

60%

Surprise

70%

Relevance

80%

https://www.technologyreview.com/2026/04/30/1136721/this-startups-new-mechanistic-interpretability-tool-lets-you-debug-llms/

5

📦 m365 Petri IT Knowledgebase

70%

Windows Zero‑Day Vulnerability Enables NTLM Credential Theft

Microsoft and the CISA have issued an urgent alert to federal agencies over a newly discovered Windows zero-day vulnerability. The flaw could enable attackers to silently extract sensitive data from …

https://petri.com/windows-zero-day-ntlm-credential-theft/

6

⚡ tech The Verge

68%

Severe Linux Copy Fail security flaw uncovered using AI scanning help

Nearly every Linux distribution released since 2017 is currently vulnerable to a security bug called "Copy Fail" that allows any user to give themselves administrator privileges. The exploit, publicl…

https://www.theverge.com/tech/922243/linux-cve-2026-3141-copy-fail-exploit

7

🤖 ai The Decoder

67%

GPT-5.5 matches Claude Mythos in cyber attack tests, UK AI Security Institute finds

OpenAI's GPT-5.5 is the second AI model capable of autonomously solving a full network attack simulation, according to the UK AI Security Institute. Its performance is nearly on par with Anthropic's …

https://the-decoder.com/gpt-5-5-matches-claude-mythos-in-cyber-attack-tests-uk-ai-security-institute-finds/

8

🔐 security Microsoft Security Blog

65%

Email threat landscape: Q1 2026 trends and insights

In early 2026, email threats increased with a rise in credential phishing, QR code phishing, and CAPTCHA-gated campaigns, highlighted by Microsoft’s disruption of the Tycoon2FA phishing platform whic…

https://www.microsoft.com/en-us/security/blog/2026/04/30/email-threat-landscape-q1-2026-trends-and-insights/

9

🔐 security SecurityWeek

65%

Anthropic Unveils Claude Security to Counter AI-Powered Exploit Surge

With Mythos signaling a new era of near-instant exploitation, Anthropic positions Claude Security to help defenders keep pace. The post Anthropic Unveils Claude Security to Counter AI-Powered Exploit…

https://www.securityweek.com/anthropic-unveils-claude-security-to-counter-ai-powered-exploit-surge/

10

🤖 ai The Decoder

64%

Anthropic launches Claude Security to give defenders the same AI edge attackers already have

Anthropic wants to give cyber defenders an edge with Claude Security, drawing on the same offensive capabilities it recently deemed too dangerous to release in another model. The article Anthropic la…

https://the-decoder.com/anthropic-launches-claude-security-to-give-defenders-the-same-ai-edge-attackers-already-have/

11

🤖 ai The Decoder

64%

Microsoft puts an AI legal agent inside Word for contract review

Microsoft is bringing an AI agent for lawyers straight into Word. The "Legal Agent" reviews contracts, suggests edits, and checks clauses against internal guidelines. The article Microsoft puts an AI…

https://the-decoder.com/microsoft-puts-an-ai-legal-agent-inside-word-for-contract-review/

12

🔐 security Schneier on Security

63%

Fast16 Malware

Researchers have reverse-engineered a piece of malware named Fast16. It’s almost certainly state-sponsored, probably US in origin, and was deployed against Iran years before Stuxnet: “…the Fast16 mal…

https://www.schneier.com/blog/archives/2026/04/fast16-malware.html

13

🤖 ai The Decoder

62%

Tencent's 440 MB AI model translates 33 languages offline on your phone

Tencent has released a compact AI translation model as an open-weight model that it claims outperforms Google Translate and runs completely offline on smartphones. The article Tencent's 440 MB AI mod…

https://the-decoder.com/tencents-440-mb-ai-model-translates-33-languages-offline-on-your-phone/

14

📦 m365 Petri IT Knowledgebase

62%

Microsoft Sets Unified RBAC as Default for New Defender Tenants

Microsoft is set to make unified role-based access control (RBAC) the default permission model for all new Microsoft Defender for Office 365 environments. The company is also rolling out more granula…

https://petri.com/microsoft-unified-rbac-default-defender-tenants/

15

🤖 ai The Decoder

59%

White House worried about compute limits as it blocks wider access to Anthropic's Mythos

The White House has rejected Anthropic's plan to expand access to its AI model Mythos to roughly 70 additional companies, the Wall Street Journal reports. The article White House worried about comput…

https://the-decoder.com/white-house-worried-about-compute-limits-as-it-blocks-wider-access-to-anthropics-mythos/