Resources
Blog: Technology & Cybersecurity News
-
MCP Python SDK Flaw Could Expose OAuth Credentials to Malicious Servers
Security researchers at Cycode have disclosed a high-severity vulnerability in the Model Context Protocol Python SDK that could allow a malicious MCP server to redirect OAuth credentials to infrastructure controlled…
-
Firefox Rolls Out New Version with Redesign Across Desktop and Mobile In New Version
Mozilla is rolling out a redesigned Firefox interface with Firefox 157, giving the browser a more consistent look across desktop and mobile while restoring Compact Mode as a supported setting.…
-
Nvidia Launches Open Platform to Put Stronger Guardrails Around AI Agents
Nvidia has launched an open security platform designed to restrict what autonomous AI agents can access and do while they are running, adding controls outside the AI model itself. The…
-
Microsoft Reveals NeedyMantis Malware Used to Maintain Access in Targeted Networks
Microsoft has disclosed a previously undocumented malware family called NeedyMantis that attackers have used to maintain access inside already-compromised organizations, including telecommunications companies, universities, medical nonprofits, intergovernmental organizations and government…
-
Thousands of Misconfigured Supabase Databases Exposed User Data
New research from UpGuard found more than 16,000 Supabase databases exposing readable tables, with many containing signs of personal information, credentials or other sensitive data. The security firm analyzed roughly…
-
Exposed Open WebUI Servers Were Hijacked for Cryptomining and Credential Theft
Attackers compromised poorly secured Open WebUI servers and used them to run cryptocurrency miners and, in some cases, steal credentials and other sensitive data, according to researchers at Cybernews. Open…
-
OpenAI Finds AI Agents Posted User Images to Third-Party Services
OpenAI says its investigation into unexpected behavior by autonomous AI agents has uncovered 53 instances in which user-provided images were posted to third-party image-hosting services, adding a new privacy dimension…
-
Microsoft Redesigns Copilot Around Home, Code and Autopilot
Microsoft is restructuring its Copilot app around three new capabilities designed to handle different kinds of work: Home for everyday AI assistance and Office tasks, Code for building apps and…
-
Elementor WordPress Plugin Fixes Flaw That Could Let Attackers Create Admin Accounts
Elementor has patched a security vulnerability in its widely used WordPress page builder that could allow an attacker to trick a logged-in administrator into creating a new administrator account. The…