Docker disclosed a critical flaw in Docker Hub where converting a personal account into an organization could reassign that account's personal access token to a named owner without rotating the token or requiring the target's consent. An attacker could exploit this to authenticate as the target user, gaining the ability to pull, push, or delete images in their repositories, depending on the token's scope and permissions. The bug has existed since August 26, 2024, though it did not grant web access or allow changes to passwords, email, or two-factor settings.
bleepingcomputer.com
· 2026-10-13
A federal appeals court ruled 2-1 that the Pentagon acted within its legal authority when it designated Anthropic a supply chain risk, effectively blacklisting the AI company from certain defense-related dealings. The ruling affirms an earlier decision favoring the government's position over Anthropic's challenge.
gizmodo.com
· 2026-09-25
A federal appeals court has ruled against Anthropic in its dispute with the Pentagon, upholding the government's designation of the AI company as a supply chain risk. The D.C. Circuit Court of Appeals decided 2-1 in favor of the Defense Department, rejecting Anthropic's legal challenge to the label.
fastcompany.com
· 2026-09-25
A federal appeals court in Washington DC declined to overturn one of two Pentagon designations that flagged Anthropic as a national-security supply-chain risk, letting that label stand indefinitely. The ruling leaves in place restrictions ordering removal of Anthropic's Claude models from military and other federal systems, while a separate designation was already struck down by a San Francisco judge earlier this year. Anthropic says it is weighing further appeals, including to a larger DC Circuit panel or the Supreme Court.
wired.com
· 2026-09-25
A federal appeals court in Washington ruled 2-1 to uphold the Defense Department's designation of Anthropic as a national security supply chain risk, blocking the Pentagon and its contractors from using Claude AI models. The ruling addresses one of two separate designations the DOD used to justify the ban; a San Francisco court had already struck down the other designation last month. Anthropic said it disagrees with the decision and is considering further legal options.
cnbc.com
· 2026-09-25
A federal judge sided with Anthropic in its lawsuit against the Pentagon, finding that officials wrongly labeled the AI firm a supply chain risk after it criticized the Department of Defense's stance on military AI use. U.S. District Judge Rita Lin said the designation was punitive rather than based on legitimate security concerns, following a dispute that began in February when Trump and Defense Secretary Pete Hegseth accused Anthropic of threatening national security.
fastcompany.com
· 2026-08-28
U.S. District Judge Rita Lin ruled that Defense Secretary Pete Hegseth's designation of Anthropic as a national security supply-chain risk violated the company's First and Fifth Amendment rights. The label had led federal agencies to halt work with Anthropic after the company refused to loosen safety limits on autonomous weapons and mass surveillance uses for its Claude models. Lin found the government's own contradictory actions, including pursuing new contracts and cybersecurity collaboration with Anthropic, undermined its claim that the company posed a genuine risk.
techcrunch.com
· 2026-08-28
A federal judge ruled that the Trump administration must withdraw its designation of Anthropic as a supply-chain risk, finding the label was retaliation rather than a genuine security concern. The dispute arose after talks broke down between Anthropic and the Pentagon over limits on using its AI in autonomous weapons and surveillance, prompting Anthropic to sue in March.
techspot.com
· 2026-08-28
A San Francisco federal judge ruled that the Department of Defense acted unconstitutionally when it labeled Anthropic a supply chain risk in March, a designation that barred defense contractors from using its Claude AI models. Judge Rita Lin found the move stemmed from the Pentagon's frustration with Anthropic's public criticism rather than any legitimate security concern, violating the company's First Amendment rights. The dispute arose after talks collapsed over how the military could deploy Claude, with Anthropic refusing to allow its technology to be used for autonomous weapons or domestic surveillance.
cnbc.com
· 2026-08-28
A federal judge determined that the Trump administration's designation of AI company Anthropic as a supply-chain risk was unlawful retaliation against the company. The ruling found the government's action violated Anthropic's First Amendment rights.
wsj.com
· 2026-08-28
GoKawiil