-
MCP for agent-to-agent comms may be the riskiest protocol you’ve never heard of
The adoption of AI agents in millions of organizations is creating new opportunities for attackers to make them take malicious actions, …
-
What to expect during the AI Cybersecurity and Resilience Summit
AI trust increasingly determines whether enterprise AI scales. As organizations move beyond pilots and put models and agents into …
-
Wikimedia says rogue OpenAI agents edited its wikis without approval
The Wikimedia Foundation says AI agents it believes OpenAI runs made unapproved edits to its wikis. They also tried and failed to break …
-
AWS Continuum sets a new standard in autonomous code security
As AI models become more capable, they uncover more security vulnerabilities and identify increasingly sophisticated paths to exploit them, …
-
Citrix NetScaler security snafus get even worse amid more 0-day reports
The attackers just keep coming after Citrix NetScaler appliances, as both the feds and private security researchers warn that someone found …
-
Apple adds new Full Disk Access controls on Macs because of AI agents
Apple will add new controls to Full Disk Access on the Mac. Users will only be able to give an app that level of access “with very …
-
Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security
Disclaimer: The views shared here reflect my personal experience and should not be read as an official Microsoft …
-
FBI confirms ‘multiple’ arrests related to ShinyHunters hack
The FBI and law enforcement partners have arrested “multiple” suspects as part of an investigation into a September hack allegedly …
-
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes
Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an …
-
Security teams are starting to treat AI like staff, and that means managing it
Ask anyone who has worked in a security operations center what the job actually involves, and you’ll hear a lot about alerts. Thousands …
-
US judge rules a police Flock search was unconstitutional mass surveillance
A federal judge in Oklahoma has ruled that a deputy’s warrantless search of Flock’s licence plate reader network broke the US …
-
Debian’s latest kernel security update has 1,313 reasons to patch
The age of LLM-assisted security vulnerability discovery is really starting to bite. Debian’s latest Linux kernel security update comes …
●●●
NVD
- CVE-2026-105169 – A security flaw has been discovered in kishor-23 food-waste-management-system …
- CVE-2026-105636 – Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery …
- CVE-2026-105170 – A weakness has been identified in kishor-23 food-waste-management-system …
- CVE-2026-105168 – A vulnerability was identified in kishor-23 food-waste-management-system …
- CVE-2026-105171 – A security vulnerability has been detected in kishor-23 food-waste-management-system …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies