The short version
Today in 3 stories
- Working exploit published for AnyDesk Linux remote-support softwareA public exploit targets unpatched AnyDesk Linux clients with pre-authentication root access.
- US and France dismantle network trafficking stolen intimate images and CSAMJoint US-France operation seized domains and made arrests over stolen intimate image trafficking.
- Anthropic rolls out tiered verified access to Claude's cybersecurity capabilitiesAnthropic now gates advanced Claude security features behind identity and authorisation tiers.
Working exploit published for AnyDesk Linux remote-support software
Researchers published a working exploit, AnyPwn, for a heap buffer overflow in AnyDesk's Linux client, demonstrating root-level command execution before authentication. The flaw affects version 8.0.2 over direct TCP connections on port 7070; AnyDesk fixed it in version 8.0.3, released in June, but the changelog only described a crash fix with no security advisory.
US and France dismantle network trafficking stolen intimate images and CSAM
US authorities seized two domains linked to a site called NudeLeaksTeens and French authorities arrested suspected administrators, with investigators estimating material from over 17,000 women and girls was collected and distributed. French reporting says some images came from compromised social media accounts, and users could reportedly earn cryptocurrency for contributing content.
Anthropic rolls out tiered verified access to Claude's cybersecurity capabilities
Anthropic introduced three access tiers for Claude's security capabilities: Defense Access for incident response and vulnerability analysis, Red Team Access for authorised penetration testing, and Specialized Access for sensitive systems like power grids and interbank infrastructure. Defense users must adopt phishing-resistant MFA and stop using static credentials by 15 December 2026.
The takeaway
What to do this week
Check remote-support software versions and connection settings this week, and treat any AI-assisted security tooling access as something to scope deliberately rather than switch on by default.
Where this comes from
Compiled by Cyentrix from 7 newsletters received 9 to 10 October 2026 ("The Cyber Security Hub™ via LinkedIn", ISACA, Cyentrix Cyber brief, Cyentrix Leads). Summaries are drafted with AI assistance from the newsletter text and edited for length; follow the source links for the full reporting. Cyentrix is not the original reporter of these items.