US lifts export restrictions on Anthropic’s most advanced AI models.

Summary

By the N2K CyberWire staff

US lifts export restrictions on Anthropic’s most advanced AI models

The US government yesterday lifted all export restrictions on Anthropic's advanced AI models, including Claude Mythos and Claude Fable, the New York Times reports. The tools were suspended on June 12th after the government deemed them a risk to national security.

Commerce Secretary Howard Lutnick said in a letter to the company, "Anthropic has taken steps in close coordination with the U.S. government to address the risks associated with Claude Mythos 5 and Claude Fable 5." Lutnick added that the Commerce Department "reserves the right to re-evaluate the decisions made in this letter."

Anthropic said it will begin restoring access today, adding, "We’re grateful to our users for their patience, and to everyone who worked with us on redeploying the models."

The real value of AI is amplifying human expertise.

AI is moving into every corner of the enterprise, often faster than organizations can govern it. Johnny Hand, VP of AI Excellence at TrendAI, joins host Dave Bittner to explain how leaders can embrace AI innovation while keeping people, governance, and operational excellence at the center. Listen now to learn how to build AI capabilities without creating new operational risks.

Adobe patches seven maximum-severity flaws.

Adobe has issued patches for six maximum-severity vulnerabilities affecting the ColdFusion web application development platform and one in the Campaign Classic marketing automation platform, BleepingComputer reports. The company has given all of the flaws a Priority 1 severity rating, meaning admins should install the patches as soon as possible. The vulnerabilities are low-complexity and can lead to arbitrary code execution without user interaction.

Citrix released fixes for six vulnerabilities in NetScaler ADC and NetScaler Gateway, including a flaw (CVE-2026-13474) that could enable the HTTP/2 Bomb exploit that was disclosed last month, SecurityWeek reports. Researchers at watchTowr call attention to CVE-2026-8451, a memory disclosure flaw similar to CitrixBleed.

Business news: Quantifind lands $200 million.

Palo Alto, California-based AI-native risk intelligence firm Quantifind has secured $200 million in a growth funding round led by Summit Partners, with participation from existing investors Citi Ventures, S&P Global, Deloitte, and Stephens Group. The round brings the company's total funding to $320 million. The company says the funding "will accelerate Quantifind's international expansion across Europe, Asia-Pacific, and the Americas, strengthening regional partnerships, advancing regulatory alignment, and extending localized risk intelligence capabilities to help multinational financial institutions and government agencies combat increasingly sophisticated financial crime and adapt to evolving global regulatory requirements."

Notes.

Today's issue includes events affecting , and the United States.

Attacks, Threats, and Vulnerabilities

Not very gentlemanly: Analyzing a zero-day exploit used by The Gentlemen ransomware to disable targets’ EDRs (Expel) How the threat group used a zero-day vulnerability to disable the target's EDR, preventing it from intervening in their ransomware attack.

Browser-only ransomware antivirus cannot see (Suriq) Check Point built browser-only ransomware from a DeepSeek AI output: a web page encrypts your files through a legitimate browser API, with no binary for antivirus to catch.

RustDuck: The Botnet That's Still Small but Engineering Like It Plans to Grow (Security Affairs) RustDuck is a small, evolving DDoS botnet migrating to Rust. It uses advanced encryption, anti-analysis evasion, and exploits known IoT flaws.

Security Patches, Mitigations, and Software Updates

Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ Attack (SecurityWeek) Citrix urges customers to patch NetScaler after fixing six vulnerabilities, including the HTTP/2 Bomb flaw and a high-severity CitrixBleed-style information disclosure bug.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

Interviewing Essentials: Grow Interviewing Muscle with Mock Interviews on The Dev Difference Tool (Virtual, USA, Jul 17, 2026) This session will introduce members to The Dev Difference, a free mock interview tool designed to help candidates practice, build confidence, and prepare for real interviews.

Breaking Barriers: Navigating Your Early Career as Women in STEM (Virtual, USA, Jul 21, 2026) Starting a career in tech can feel exciting, challenging, and uncertain. This session is designed to help women in STEM navigate the early years of their careers with more clarity and confidence. You’ll hear from Hayley Murphy, Senior Campus Recruiter on CBRE’s Campus Digital & Technology team, along with women working in Digital & Technology at CBRE.

Tech for Good: When Moments Matter with Axon (Virtual, USA, Jul 28, 2026) This session will explore career pathways in mission-driven technology and give members a closer look at how technical teams at Axon build products that support public safety, accountability, and real-world impact.

Black Hat USA (Las Vegas, Nevada, USA, Aug 1 - 6, 2026) The premier cybersecurity event of the year returns to Mandalay Bay with a re-engineered, six-day program built to ignite innovation, push boundaries, and bring the global security community together like never before. This year’s event features four days of immersive, expert-led Trainings (August 1–4), followed by Summit Day on Tuesday, August 4, and a two-day main conference packed with groundbreaking Briefings, open-source tool demos in Arsenal, a dynamic Business Hall, and unlimited learning & networking opportunities.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry's largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust N2K CyberWire to get the message out. Learn more.

Daily Briefing for 07.01.26

Top stories.