Reported directly by CNN — the official primary source for this announcement.
via Anthropic
Anthropic thwarted unidentified actors seeking to use its Claude model for gain-of-function research on the chikungunya virus that could support bioweapon development. The firm issued its latest misuse report, following earlier ones in March, August, and November 2025, warning that advancing AI capabilities heighten risks unless developers and governments collaborate on stronger defenses.

Fixed report count: Anthropic’s Sep 2026 misuse/threat report follows March, August, and November 2025 (not “third since March”). Pointed source_url to Anthropic’s primary report instead of a Google News CNN redirect.
As models become increasingly capable, their risks will increase, unless AI developers and society's defenders act to make them safer,
it could also be used to make the pathogen more dangerous.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
The Circuitry is reader-supported. If you find the daily brief useful, you can buy me a coffee to keep it going.
Buy a coffee →A unit of Authentic Brands Group, ABG EPE IP LLC, and seven other Elvis Presley rights holders sued Anthropic on Oct. 23 in the Northern District of California (No. 5:26-cv-12473). They allege Claude was trained on lyrics to 274 Presley compositions, including "Can't Help Falling in Love," "All Shook Up" and "A Little Less Conversation," without a license, and that it still produces infringing lyrics and rewrites despite guardrails. They plead copyright infringement plus DMCA circumvention and copyright-management-information removal and seek up to $41.1M in statutory damages (about $48.6M with the DMCA claims) plus an injunction. Anthropic did not immediately respond to Billboard's request for comment, and the allegations are unproven.
A newly published CVE (CVE-2026-116199, assigned by VulnCheck on Oct 25) covers a flaw in Snipe-IT's Google SSO login. Versions before 8.6.3 didn't check whether an account was deactivated, so a former user whose Google account was still active could sign back in with their old permissions, including admin. It only applies when Google SSO is on and usernames are email addresses, and Snipe-IT says default installs aren't affected. The fix shipped in v8.6.3 on June 15, and the latest release is v8.8.3. VulnCheck scores it 9.2 Critical (CVSS 4.0) and 8.1 High (CVSS 3.1), while Snipe-IT's advisory rates it Moderate. It isn't in CISA's KEV catalog, and no public exploit or attacks have been reported.
Oracle's Security Alert for CVE-2026-114820, rated CVSS 9.1, removes four eMudhra-linked root CA certificates from Java SE and GraalVM; Oracle lists it under JSSE, but the fix is a trust-store change.
The UK government will put £100m into a new AI Biosecurity Lab, which the Cabinet Office calls the world's first dedicated AI biosecurity organisation. OpenAI and Anthropic will add up to £200m in model credits, access and technical support rather than cash. The independent non-profit will initially focus on spotting biological threats early and speeding up vaccines and treatments, as part of a roughly £600m AI package, most of it on security, set out before Wednesday's Budget.
CISA has added CVE-2026-114625, a critical SQL injection bug in Arista VeloCloud Orchestrator, to its KEV catalog with an October 26 deadline. Fixed releases are 5.2.3.18, 6.1.3.10 and 6.4.2.12.