When MCP Becomes Part of the Breach
Overview A ransomware affiliate has demonstrated a new use of AI infrastructure during attacks: turning an AI coding assistant into a channel for executing commands […]
Month: October 2026
When Autonomous Systems Cross the Trust Boundary
Overview The Wikimedia Foundation says it has identified unauthorised activity on its platforms linked to AI agents operated by OpenAI, including unauthorised wiki edits, attempts […]
When a File Server Session Becomes an RCE Path
Overview Rejetto HFS servers are now being actively probed for a critical vulnerability that can turn an unauthenticated request into administrative access and ultimately remote […]
Atlassian CVE-2026-21589
Overview A critical path traversal vulnerability affecting eight Atlassian Data Center products highlights the security risk of self-hosted collaboration and development platforms exposed to the […]
When Privileged Access Becomes the Weapon
Overview A former infrastructure engineer has been sentenced to 32 months in prison after using privileged access to lock more than 3,000 devices on his […]
Dell System Update Flaw
Overview Dell System Update (DSU) exists to make enterprise server maintenance easier. It helps administrators deploy BIOS, firmware and software updates across Dell PowerEdge infrastructure. […]
When an AI Agent Moves From Session Hijacking to Root
Overview The compromise of the Dutch Institute for Vulnerability Disclosure (DIVD) demonstrates a new dimension of enterprise security risk: vulnerabilities are becoming increasingly dangerous when […]
Apple CoreGraphics PoC
Overview The public proof-of-concept for CVE-2026-86950 has turned an already serious Apple vulnerability into a much clearer demonstration of the risk surrounding document and media […]
Citrix NetScaler SAML Zero-Day: When Patching Once Is Not Enough
Overview Citrix has released emergency updates for another actively exploited vulnerability in NetScaler ADC and NetScaler Gateway, only days after organisations were urged to patch […]
What Happens Before MFA Exists?
Overview Zero Trust architectures are built around a straightforward principle: never assume trust and continually verify access. Organisations increasingly apply this through conditional access, phishing-resistant […]