Identity & Access Management

How Do MCP SDK Flaws Expose OAuth Credentials?

Security

How Do MCP SDK Flaws Expose OAuth Credentials?

The discovery of vulnerabilities in the Model Context Protocol highlights that security properties must survive state persistence, schema parsing, and routine object processing within the framework. As organizations increasingly adopt agentic AI syst

Hackers & Threats Google Dismantles XCPE Botnet and Bans Compromised OEM

A coordinated international operation led by Google’s Threat Intelligence Group has successfully neutralized the massive XCPE botnet, which had compromised more than one million Android-based devices worldwide. Investigations into the infrastructure revealed that Videostrong Technology, a prominent

Google Dismantles XCPE Botnet and Bans Compromised OEM
Security How Did the Claude Code Extension Attack Target Cursor?

The sudden appearance of highly sophisticated supply chain compromises within specialized integrated development environments has redefined the cybersecurity landscape for software engineers in late 2026. While many developers transitioned to AI-first coding tools to accelerate their daily

How Did the Claude Code Extension Attack Target Cursor?
Hackers & Threats How Is North Korea Poisoning the Software Supply Chain?

A standard freelance coding challenge can now serve as a gateway for state-sponsored actors to infiltrate global software repositories and hijack upstream development environments. This tactical shift, observed in the operations of the North Korean threat group DeceptiveDevelopment, marks a

How Is North Korea Poisoning the Software Supply Chain?
Hackers & Threats Volta-Autodoxer Uses AI to Automate Victim Profiling

The traditional boundaries of cyber-espionage have shifted dramatically as automated systems now possess the capability to analyze human behavior and financial worth with chilling precision. The emergence of Volta-Autodoxer, commonly referred to as VOLTA, represents a fundamental evolution in the

Volta-Autodoxer Uses AI to Automate Victim Profiling
Hackers & Threats Is Your Code Editor Safe From Supply Chain Attacks?

Modern software development relies heavily on the trust established between developers and the third-party extension ecosystems that enhance productivity, yet this very reliance has become a lucrative gateway for sophisticated adversaries seeking to compromise high-value workstations. When an

Is Your Code Editor Safe From Supply Chain Attacks?
Business Perspectives How Critical Is the WSO2 API Manager Access Control Flaw?

Security professionals are currently evaluating the implications of a hidden patch that was initially introduced to the open-source community under the misleading title of a code improvement. This discovery, centered on the critical vulnerability identified as CVE-2025-11969, has sent ripples

How Critical Is the WSO2 API Manager Access Control Flaw?
Loading
subscription-bg
Subscribe to Our Weekly News Digest

Stay up-to-date with the latest security news delivered weekly to your inbox.

Invalid Email Address
subscription-bg
Subscribe to Our Weekly News Digest

Stay up-to-date with the latest security news delivered weekly to your inbox.

Invalid Email Address