Skip to content

695 results for โ€œserverโ€

ListGrid
What you seeeverything
RecentOldestAddedAโ€“Z
All types695Articles183Repos141Write-ups119Advisories91Threads70Papers48
Tools34Talks4Other3Courses2
โ€œserverโ€
en.cryptonomist.charticle๐Ÿ›ก๏ธ Security

BTCPay Server vulnerability: about $1.63M traced to theft-linked addresses

BTCPay Server's 2 November 2026 incident update describes attackers logging in as administrator on servers running version 2.4.1 or earlier and sweeping on-chain hot wallets. Bitquery traced about $1.63M (18.38 BTC and 3,405 LTC) to two addresses, across 682 sweeps from 30 October. The project advises migrating to a new server with a fresh seed, installing 2.4.7 and preserving logs. How admin access was gained is not explained.

BTCPay ServerLNDBitcoin+1
BitqueryCryptonomist

Blockchain, Threat Intelยท Published and added 3 Nov 2026

jfrog.comwriteup๐Ÿ›ก๏ธ Security

bREACHYing the Perimeter: How One HTTP Request can Hijack your AI Robot

JFrog's analysis of five CVEs in the Reachy Mini robot daemon (Pollen Robotics, Hugging Face), a FastAPI server on TCP 8000 with no authentication and wildcard CORS. A single POST to /api/apps/install runs attacker code through uv pip install, and the daemon's passwordless sudo gives persistent root. It also covers a browser CSRF variant, a BLE PIN bypass with path traversal (CVE-2026-55419 upload step), and fixed version 1.11.0.

Reachy MiniFastAPIHugging Face+3
CVE-2026-55419JFrogPollen Robotics+3

Hardware & RF, AppSec, Supply Chainยท Published and added 3 Nov 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

Police seizes over 100 servers in investment scam crackdown

Europol and Eurojust coordinated an action by authorities in Albania, Cyprus, Finland, Germany, Kosovo and North Macedonia that arrested seven suspects and seized more than 100 servers. The targeted company allegedly ran a crime-as-a-service model from Cyprus and Israel, supplying fake trading platforms and stolen victim data to call centres. Victims in at least 50 countries were pushed into larger transfers with fake profits. The article lists earlier European fraud takedowns.

EuropolEurojustcrime-as-a-service+1

Threat Intelยท Published and added 3 Nov 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

Google Dismantles XCPE Botnet of 1.3 Million Android Devices

XCPE (X.CPE) is a backdoor and botnet of more than 1.3 million Android set-top boxes, built and run by the Chinese OEM/ODM Videostrong Technology. Google dismantled it through legal action against domains and servers and banned Videostrong from preloaded Google apps. The malware used a three-stage design persisting on the /oem/ partition and was used for ad fraud, residential proxies and further malware loading.

AndroidAndroid TV
XCPEVideostrong TechnologyGoogle+8

Threat Intel, Mobile Security, Supply Chainยท Published and added 3 Nov 2026

x.comtool๐Ÿ›ก๏ธ Security

Odingard Security (@OdingardSecure) on X

Guardian is an Apache-2.0 authorization layer from Odingard that returns a deterministic ALLOW, ASK or DENY decision for every action an AI agent proposes, before the action runs. No model sits in the decision path. It issues single-use capability tokens instead of credentials and signs a receipt for each action. An MCP server is listed on the official registry. The post gives no architecture or policy-format detail.

GuardianModel Context Protocol
Odingard

AI Security, Identity & Accessยท Added 3 Nov 2026

x.comrepo๐Ÿง  AI

Md Ismail ล ojal๎จ€ ๐Ÿ•ท๏ธ (@0x0SojalSec) on X

An x64dbg MCP server, published on GitHub by duty1g and shared in an X post by @0x0SojalSec, lets Claude drive the x64dbg Windows debugger. It exposes breakpoints, memory dumps and code stepping as tools for reverse engineering and malware analysis. A reply warns that debugging a sample executes it, so the agent should run in a snapshotted VM with no shared folders or host route, and every command should be logged.

x64dbgModel Context ProtocolClaude+2
duty1g

mcpยท Added 3 Nov 2026

microsoft.comarticle๐Ÿ›ก๏ธ Security

What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

Microsoft analysis of about 383,000 CVEs disclosed from 1999 to September 2026, of which about 2,000 (0.5%) were exploited in the wild. Exploited CVEs skew to takeover classes: server-side RCE rises from 20% to 37%, local privilege escalation from 11% to 18%, and client-side RCE from 4% to 13%. Median patch times run from 2 weeks on Windows workstations to over a year on network appliances, while the median time to CISA KEV listing in 2026 is 3 days.

CISA KEVCVSSWindows+2
CISAVulnCheckMicrosoft+3

Threat Intel, Blue Team & Detectionยท Published and added 2 Nov 2026

cisa.govadvisory๐Ÿ›ก๏ธ Security

Subnet Solutions PowerSYSTEM Center

CISA advisory ICSA-26-307-01 (3 November 2026) covers two vulnerabilities in Subnet Solutions PowerSYSTEM Center 2020, 2024 and 2026: CVE-2026-63017, incorrect authorization letting a low-privileged authenticated user reach admin-only resources, and CVE-2026-63774, SQL injection. Vendor CVSS v3 is 9. Subnet recommends upgrading to PowerSYSTEM Center 2026 Update 1.1, monitoring user activity and blocking F12 Developer Tools for Client Access Server users.

PowerSYSTEM CenterCVSS
CVE-2026-63017CVE-2026-63774CISA+2

AppSecยท Added 3 Nov 2026, published 2 Nov 2026

x.comtool๐Ÿง  AI

Odingard Security (@OdingardSecure) on X

Guardian is an open-source (Apache-2.0) authorization layer from Odingard that gives every action an AI agent proposes a deterministic ALLOW, ASK or DENY decision before it runs. No model sits in the decision path. It issues single-use capability tokens in place of credentials and signs receipts for every action. An MCP server is listed on the official registry. The post gives no architecture or policy-format detail.

GuardianModel Context ProtocolGitHub
Odingard

agents, mcp, ai-infraยท Added 3 Nov 2026, published 2 Nov 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

Google disrupts million-device XCPE Android malware botnet, bans TV box maker

XCPE is an Android TV box botnet of more than 1.3 million devices, which Google's Threat Intelligence Group attributes with high confidence to manufacturer Videostrong Technology, who preinstalled a system-level backdoor in firmware. The backdoor (x.cpe, com.oemservice) used an MQTT broker for commands and loaded ad fraud and residential proxy modules. Google took down C2 servers tied to 10 million more devices and banned Videostrong from certified Android devices.

AndroidAndroid TVMQTT+2
XCPEVideostrong TechnologyGoogle Threat Intelligence Group+17

Threat Intel, Mobile Security, Hardware & RFยท Published and added 2 Nov 2026

aws.amazon.comarticle๐Ÿ›ก๏ธ Security

Beyond DKIM key rotation: understanding email replay attacks

DKIM replay attacks are explained: an attacker resends a genuinely signed message unchanged from their own servers, so DKIM passes and DMARC passes even at p=reject. The post shows how to tell replay from spoofing or a legitimate relay using DMARC rua reports, why rotating a key without removing the old public key from DNS leaves messages replayable, and how Amazon SES (BYODKIM vs Easy DKIM), Route 53 and CloudWatch support detection and response. It ends with an ordered incident-response procedure.

Amazon SESAmazon Route 53Amazon CloudWatch+2
DKIM replayDKIM2IETF+3

Blue Team & Detection, Cloud & Infraยท Published and added 2 Nov 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

BTCPay Server warns of hot wallet thefts targeting outdated instances

BTCPay Server, an open-source self-hosted cryptocurrency payment processor, reports attackers draining hot wallets on instances running version 2.4.1 (July 23, 2026) or earlier. Attackers logged in as administrators on versions older than 2.4.2. Users should update to 2.4.7; the exploited flaw is not disclosed. An October 29 critical vulnerability found by Anthropic's Frontier OSS scanner prompted 2.4.7. The August 7 release 2.4.2 had already warned of an exploited LND credential exposure.

BTCPay ServerBitcoinLightning Network+2
Nicolas DorierAnthropicBleepingComputer

Blockchain, Threat Intel, AppSecยท Published and added 2 Nov 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

CVE-2026-97229 is a maximum-severity integer overflow in GitLab's CI/CD Regular Expression Compiler that lets an unauthenticated attacker run code via a crafted regex in pipeline configuration. GitLab patched it on 12 October 2026 in versions 19.4.2, 19.3.5 and 19.2.8. CISA added it to KEV, and Shadowserver tracks over 1,000 unpatched servers, plus 11,300 exposed to the related CVE-2026-110264.

GitLab
CVE-2026-97229CVE-2026-110264CVE-2026-85706+6

AppSec, DevSecOps, Threat Intelยท Published and added 2 Nov 2026

decrypt.coarticle๐Ÿ›ก๏ธ Security

BTCPay Tells Merchants to Switch Off Servers Amid Hot Wallet Attack Reports

BTCPay Server told operators on 1 November 2026 to shut down instances after reports of hot wallets being swept. The project later said the attack targeted versions 2.4.1 or older, with attackers logging in with administrator access, and it had no credible drain reports for 2.4.7. Release 2.4.7 (Thursday) fixed one critical and several medium flaws found by Anthropic's scanner. The number of servers affected and the amount stolen are not stated.

BTCPay ServerBitcoin
Nicolas DorierLunaNodeAnthropic

Blockchain, Threat Intelยท Published and added 2 Nov 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

Synology warns of C3RB3R ransomware attacks targeting NAS devices

C3RB3R (Cerber) ransomware is encrypting Synology NAS devices running outdated DiskStation Manager, and Synology issued an advisory urging immediate updates. The attacks exploit a vulnerability patched in December 2024, likely among CVE-2024-10441, CVE-2024-50629 and CVE-2024-10445 from a November 2024 advisory. Victims get a read-me3.txt note and .L0CK3D extension. Shadowserver tracks over 380,000 exposed Synology NAS devices.

Synology DiskStation ManagerConfluenceGitLab
CVE-2024-10441CVE-2024-50629CVE-2024-10445+7

Threat Intelยท Published and added 2 Nov 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

Ivanti patches two more Connect Secure zero-days chained in attacks

Ivanti patched two more Connect Secure zero-days, CVE-2026-111357 (privilege escalation) and CVE-2026-118527 (authenticated file upload), chained with authentication bypass CVE-2026-104935 since at least 1 October 2026. Volexity attributed the chain to UTA0576, which ran no malware, re-exploited the device per command and tampered with logs, evading Ivanti's Integrity Checker Tool. CISA added CVE-2026-104935 to KEV, and Shadowserver tracks over 5,000 exposed instances.

Ivanti Connect SecureVPN
CVE-2026-111357CVE-2026-118527CVE-2026-104935+12

Threat Intel, Offensive Securityยท Published and added 2 Nov 2026

x.comthread๐Ÿ›ก๏ธ Security

The Hacker News (@TheHackersNews) on X

The Hacker News post reports a Linux kernel TCP flaw in the MPTCP code, rated CVSS 9.8. Anthropic demonstrated an exploit that runs commands as root on servers. Ubuntu and RHEL had no fixes at posting time, while Debian, Oracle and others released patches for some versions. The post gives no CVE ID or technical detail.

Linux kernelMPTCPAnthropic+3
The Hacker NewsRed HatOracle

Offensive Security, Cloud & Infraยท Added 3 Nov 2026, published 2 Nov 2026

x.comtool๐Ÿ›ก๏ธ Security

Md Ismail ล ojal๎จ€ ๐Ÿ•ท๏ธ (@0x0SojalSec) on X

An x64dbg MCP server (GitHub repo by duty1g, shared via an X post) that lets Claude drive the x64dbg Windows debugger: set breakpoints, dump memory, step code and run other reverse engineering tasks programmatically. The post targets malware analysts. A reply notes that debugging a sample executes it, so the agent should run in a snapshotted VM with no shared folders or host route, with every command logged.

x64dbgModel Context ProtocolClaude+1

Malware & RE, AI Securityยท Added 3 Nov 2026, published 1 Nov 2026

x.comthread๐Ÿง  AI

Smarthouse (@localyzapp) on X

A reply by Smarthouse (@localyzapp) on X to a question about the best harness for connecting local models to a Minecraft server. It suggests an MCP server that wraps RCON plus a small agent loop. The main pitfall is block coordinates: expose "/execute if block" as a read tool so the agent can check blocks before placing them, or it will hallucinate terrain.

Model Context ProtocolMinecraftRCON

mcp, agentsยท Added 2 Nov 2026, published 1 Nov 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

Alpine Linux rebuilds GitLab after attempted RCE attack

Alpine Linux rebuilt its GitLab server and reset all passwords after attackers tried to exploit CVE-2026-97229, a maximum-severity integer overflow in the Onigmo regex engine bundled with Ruby, on October 20-21. Eight worker crashes occurred and four were partially successful. Missing logs and outbound connection records meant compromise could not be ruled out. Alpine had run GitLab 19.3.4, then 19.3.6, which lacked the Ruby patch; the fixed image is alpinelinux/gitlab:19.3.6 with Ruby 3.3.13.

GitLabAlpine LinuxDocker+1
CVE-2026-97229integer overflowOnigmo

Supply Chain, Blue Team & Detection, DevSecOpsยท Published and added 1 Nov 2026

x.comthread๐Ÿ›ก๏ธ Security

lee1981 (@lee1981b) on X

CyberForge Weekly CVE Rundown #008 covers seven CVEs from 26 to 31 October 2026: Wasmtime/Cranelift miscompilation, Rust zip cloaking, Qode Membership account takeover, Dell PowerProtect Data Domain stack overflow, two Progress WS_FTP Server flaws and Kubeflow Pipelines log reads. Each entry gives fixed versions and defender actions. A 1 November check adds EPSS values dated 31 October and notes none of the IDs were in CISA's 30 October catalogue.

WasmtimeKubeflow PipelinesWS_FTP Server+3
CVE-2026-115889CVE-2026-115905CVE-2026-92885+11

AppSec, Cloud & Infraยท Added 3 Nov 2026, published 1 Nov 2026

x.comtool๐Ÿง  AI

zahT3 (@zahT3zuo) on X

Hotseat is a free, open-source macOS menu bar app that moves Claude Code and Claude Desktop to another of the user's Claude accounts in one click and returns to the same session. Sessions, settings, skills and MCP servers are shared, so `claude --resume` works under either account. When a session hits a usage limit, it offers to continue under another account. It never reads tokens or cookies. Install with Homebrew.

Claude CodeClaude DesktopmacOS+2
HotseatAnthropic

coding-agentsยท Added 1 Nov 2026, published 31 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Julie Sanchez (@julie199201) on X

YourOwnWeigh is an open-source tool by developer Tom Anthony that patches Withings smart scale firmware over Bluetooth. The patch sends health metrics to a user's own server instead of Withings cloud, avoiding the Withings Plus subscription now required for third-party sync. It can run on a free Cloudflare account and imports existing user profiles. The post gives no firmware or protocol details.

YourOwnWeighWithingsCloudflare+1
Tom Anthony

Hardware & RFยท Added 2 Nov 2026, published 30 Oct 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

Critical Linux kernel flaw allows remote root attacks on MPTCP servers

CVE-2026-98432 is a use-after-free race condition in the Linux kernel IPv4 TCP code (tcp_v4_syn_recv_sock, ireq_opt), affecting kernels back to 4.4 and rated 9.8 by the kernel CVE team (Red Hat rates it 5.9). Anthropic researchers say an unreleased Claude model built an exploit that bypassed KASLR and got remote root on an MPTCP listener in about 53 minutes. The article lists distro patch status and CIQ's nftables mitigation for IP options; disabling MPTCP alone does not help. No in-the-wild exploitation is reported.

Linux kernelAnthropicClaude+2
CVE-2026-98432use-after-freeKASLR bypass+4

Offensive Security, AI Security, Cloud & Infraยท Published and added 30 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Tanmay (@TanmayK_03) on X

DBHub, a database MCP server, had a read-only mode bypass in its SQL check. The check treated every `--` as a comment, but MySQL only starts a comment when whitespace follows it. A hidden write statement could therefore still run, and a prompt injection could trigger it. Fixed in version 0.22.6. Replies say enforcement belongs in database grants and that parser tests need to be dialect-specific.

DBHubMySQLModel Context Protocol
prompt injection

AppSec, AI Securityยท Added 31 Oct 2026, published 30 Oct 2026

status.bunny.netadvisory๐Ÿ›ก๏ธ Security

Bunny CDN Security Incident

Bunny CDN status-page notice, posted 28 October 2026, about unauthorized access at an infrastructure provider that hosted one bunny.net CDN node in Armenia. Traffic was stopped within 20 minutes and the server wiped. No access to the node was found, but cached content, Pull Zone configs and TLS certificates could have been exposed, so all platform certificates were reissued. Customers with their own certificates should rotate them with new private keys.

Bunny CDNTLS
bunny.netb-cdn.netbunny.run

Threat Intel, Cloud & Infraยท Added 31 Oct 2026, published 30 Oct 2026

arxiv.orgpaper๐Ÿ›ก๏ธ Security

How Much Can Tool Calls Reveal About You? Privacy Leakage from Tool-Call Traces

PrivacyTrace is a benchmark of 1,000 synthetic user profiles and 4,000 agent trajectories across four domains, built with real tools from 25 MCP servers. Four LLM attackers inferred user attributes from tool-call traces alone at a 26.25% success rate, against 17.97% for prior-based guessing. Tool arguments and returned results gave the main evidence, and linking traces across sessions raised the risk.

Model Context ProtocolLLM
PrivacyTraceuser profile inferencebehavioral side channel

AI Securityยท Added 3 Nov 2026, published 30 Oct 2026

arxiv.orgpaper๐Ÿง  AI

How Much Can Tool Calls Reveal About You? Privacy Leakage from Tool-Call Traces

PrivacyTrace is a benchmark from the Shanghai AI Laboratory (AgentDoG Team, October 2026) that tests how much a passive observer can infer about a user from MCP tool-call traces alone. It has 1,000 synthetic profiles, 4,000 trajectories and 67,950 calls across 25 MCP servers. Four LLM attackers reached 26.25% attribute accuracy against a 17.97% prior baseline, and tool arguments leaked most.

Model Context ProtocolPydantic AILLM+1
PrivacyTraceShanghai AI LaboratoryAgentDoG Team+5

evals, mcp, researchยท Added 3 Nov 2026, published 30 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak

SecurityWeek's weekly roundup of 30 October 2026 covers CVE-2026-97631, a 16-year-old buffer overflow in TianoCore EDK II that affects PXE network boot on most servers. It also covers a Cloudflare Workers AI cross-tenant leak caused by an SGLang bug, Anthropic's dispute with Cathedral over a bug bounty intrusion, and fake AI bots probing for secrets. Other items include AI-assisted ransomware (Gold Ogre, Aur0ra), the NIK C2 framework, and North Korean IT worker sanctions.

TianoCore EDK IISGLangCloudflare Workers+3
CVE-2026-97631CathedralCequence+9

Threat Intel, AI Security, Hardware & RFยท Published and added 30 Oct 2026

twitter.comthread๐Ÿง  AI

Anthropic Cracking Down on Video Game Rewrites

A tweet from chasmmmmmmmmmmm says Claude Code received a new rule around 27 October 2026, delivered from Anthropic's servers under the flag "tengu_heron_brook", with no setting to disable it. The quoted rule allows original games, genre games and games from the user's own designs and assets, but forbids recreating a specific existing game, even if renamed. The post asks whether this ends game rewrites and modding, and gives no verification beyond the quoted text.

Claude Code
Anthropictengu_heron_brook

coding-agents, prompting, ai-policyยท Added 31 Oct 2026, published 30 Oct 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

CISA says max severity GitLab flaw now exploited in the wild

CVE-2026-97229 is a maximum-severity GitLab flaw in the CI/CD Regular Expression Compiler, caused by an integer overflow, that lets unauthenticated attackers run code via a crafted regular expression. CISA added it to the KEV Catalog and ordered federal agencies to patch under BOD 26-04. GitLab fixed it in CE/EE 19.4.2, 19.3.5 and 19.2.8, and Shadowserver tracks about 2,800 exposed CE instances.

GitLab
CVE-2026-97229CVE-2026-0723CVE-2026-110264+10

AppSec, DevSecOps, Threat Intelยท Published and added 30 Oct 2026

x.comadvisory๐Ÿ›ก๏ธ Security

lee1981 (@lee1981b) on X

CyberForge CVE of the Day #091 covers Progress WS_FTP Server CVE-2026-84295 (unauthenticated administrator-credential exposure, CVSS 10.0) and CVE-2026-90868 (conditional OS command and argument injection, CVSS 9.9, low privileges). Fixed floors are 2024.0.7/9.0.7 and 2025.0.4/10.0.4; 2024.0.6/2025.0.3 fix only the first. It gives KEV, EPSS and SSVC status, six SOC checks, and Windows 4688 evidence queries.

WS_FTP ServerWindowsPowerShell+3
CVE-2026-84295CVE-2026-90868CWE-287+9

Blue Team & Detection, Identity & Accessยท Added 2 Nov 2026, published 30 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

ESET Research (@ESETresearch) on X

ESET Research thread summarising its APT Activity Report for April to September 2026 on Russia-aligned groups targeting Ukrainian defense, government and infrastructure. Gamaredon deployed Turla's new VBScript recon tool Rezzuar, indicating FSB-linked collaboration, and updated its file stealer PteroBox while activity fell sharply from mid-May. A separate campaign hit MDaemon mail servers via CVE-2025-8088, delivering HELLAGE and HELLTAG backdoors with no user interaction.

MDaemonClamAVWinRAR+1
CVE-2025-8088GamaredonTurla+6

Threat Intelยท Added 31 Oct 2026, published 30 Oct 2026

github.comrepo๐Ÿง  AI

rikugan: LLM reverse-engineering agent for IDA Pro and Binary Ninja

Rikugan is a reverse-engineering agent that runs inside IDA Pro and Binary Ninja. It has its own generator-based agent loop, context management, plan mode and 60+ tools, and does not depend on an external MCP server. An orchestrator spawns parallel subagents to analyze a binary. It supports Anthropic, Gemini, MiniMax, Kimi, OpenAI-compatible endpoints and Ollama, with per-model notes.

IDA ProBinary NinjaHex-Rays+6
RikuganClaude Opus 4.6Claude Sonnet 4.6+6

agents, coding-agentsยท Added 30 Oct 2026

github.comrepo๐Ÿ›ก๏ธ Security

rikugan: LLM reverse-engineering agent for IDA Pro and Binary Ninja

Rikugan is an open-source reverse-engineering agent that runs inside IDA Pro 9.0+ and Binary Ninja, with its own agent loop instead of an MCP server. It has 60+ tools (decompiler, xrefs, strings, types, IL/microcode), parallel subagent exploration, an experimental /modify natural-language patching command and an experimental Binary Ninja deobfuscation skill for control flow flattening and opaque predicates. It supports Claude, Gemini, MiniMax, Kimi, OpenAI-compatible endpoints and Ollama.

IDA ProBinary NinjaLLM+3
control flow flatteningopaque predicatesMBA expressions+1

Malware & RE, AI Securityยท Added 30 Oct 2026

x.comtool๐Ÿง  AI

Ritik Shukla (@Retik_S) on X

kanzo is a local kanban board that coding agents can update. It ships as one 4 MB binary that starts in 2 ms and runs on localhost. It also works as an MCP server, so Claude Code and Codex see the same tasks as the user. The board is stored as a folder that can sync through a private git repo. The post is brief and gives no further detail.

Model Context ProtocolClaude CodeCodex+2
kanzo

mcp, coding-agentsยท Published and added 30 Oct 2026

x.comthread๐Ÿง  AI

aiproduck (@aiproduck) on X

Ruflo is an MIT-licensed wrapper for Claude Code and Codex that adds agent swarms, vector memory and an MCP server. The plugin install writes no files to the workspace, while npx init adds a .claude/ directory, CLAUDE.md and hooks. The post warns that mods run with the account's permissions, so users should read them first. It gives no benchmarks or architecture detail.

Claude CodeCodexModel Context Protocol+1
Ruflo

coding-agents, agents, mcpยท Published and added 30 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

ๅทๅดŽๅ…ƒ (@foryangxin) on X

CVE-2025-6514 is an OS command injection (CWE-78, CVSS 9.6) in mcp-remote 0.0.5 to 0.1.15, fixed in 0.1.16. A malicious MCP server supplies a crafted authorization_endpoint during OAuth discovery, and the open package passes it to PowerShell on Windows. The thread cites the MCP spec's URL scheme allowlist rules and advises treating discovery metadata as untrusted, pinning bridge tools and sandboxing them.

Model Context Protocolmcp-remoteOAuth+3
CVE-2025-6514CWE-78SSRF+2

AI Security, Identity & Access, AppSecยท Added 2 Nov 2026, published 30 Oct 2026

vulncheck.comtool๐Ÿ›ก๏ธ Security

VulnCheck - Outpace Adversaries

VulnCheck Open Source is an index of VulnCheck's open-source tooling for its vulnerability and exploit intelligence. It lists a Python API client, a CLI, a GitHub Action for CI/CD, go-exploit (a Go exploit framework), an MCP server for delivering intelligence to AI clients, and VulnCheck Insights, a Chrome extension that highlights CVEs, CPEs and PURLs on web pages and enriches them. The page gives only one-line descriptions.

GoPythonGitHub Actions+2
VulnCheckgo-exploitVulnCheck Insights+2

Offensive Security, DevSecOpsยท Added 29 Oct 2026

pillar.securityarticle๐Ÿ›ก๏ธ Security

SAIL Framework: A Practical Guide for AI Security

The SAIL Framework from Pillar Security is a seven-phase, lifecycle-oriented method for securing AI systems. The phases are AI policy and safe experimentation, AI asset discovery, AI security posture management, AI red teaming, runtime guardrails, sandboxed execution for agents and MCP servers, and AI activity tracing. It argues for a "Shift Up" approach that protects the business logic AI controls, and it is meant to sit on top of existing standards.

Model Context Protocol
SAIL FrameworkPillar Securityprompt injection+3

AI Security, GRCยท Added 29 Oct 2026

oversecured.comarticle๐Ÿ›ก๏ธ Security

Android security checklist: theft of arbitrary files | Oversecured Blog

Oversecured's Android security checklist on arbitrary file theft from an app's private storage. It covers implicit intents (PICK, GET_CONTENT) returning file:// or content:// URIs, SEND/SEND_MULTIPLE share activities, exported and non-exported FileProviders, path traversal via Uri.getLastPathSegment, WebView, and local NanoHTTPD servers. Each case has vulnerable code, an attacker PoC and fixes such as /proc/self/fd path checks and narrow files-path entries.

AndroidNanoHTTPDFileProvider+2
Oversecuredpath traversalFileUriExposedException+3

Mobile Security, AppSecยท Added 29 Oct 2026

oversecured.comarticle๐Ÿ›ก๏ธ Security

What changed when mobile security stopped being theoretical

An Oversecured Head of Engineering, coming from 20 years of web work, describes four mobile security risks that became concrete after seeing real production apps. These are old vulnerable binaries that stay installed after a fix, secrets embedded in client code, Keychain/Keystore guarantees that are weaker than assumed with tokens leaking via logs, and deep links or exported components acting as public endpoints. It ends with advice: test the shipped artifact, verify the full data lifecycle, and build server-side containment.

AndroidiOSOversecured
deep linkscustom URL schemesApp Links+5

Mobile Security, AppSecยท Added 29 Oct 2026

github.comrepo๐Ÿ›ก๏ธ Security

Show HN: Auto Dismiss Mac OS "Allow <app> to find devices on local networks?"

dontallow is a two-file Swift launchd agent for macOS 15 and later that clicks "Don't Allow" on the "find devices on local networks" prompt. It watches the UserNotificationCenter process through an Accessibility observer, supports pause and allowlist, and can decode the Local Network rule store to show orphaned rows. It explains why Chromium temp-bundle paths make the prompt recur, and gives a PPPC profile route for fleets.

macOSSwiftlaunchd+2
Local Network privacy promptPPPCTCC

Cloud & Infraยท Added 30 Oct 2026, published 29 Oct 2026

x.comthread๐Ÿง  AI

Prasenjit Sarkar (@stretchcloud) on X

A thread on Cloudflare's agent-readiness scan and the AgentReady.org open spec for "Agent Experience", developed with Vercel, Stripe, Auth0, Mintlify, Google, Netlify and Elementor. The scan grades whether agents can find a site (robots.txt, DNS), read clean Markdown, pass bot rules, and discover an MCP server or API catalog. One quoted example raised a score from 20 to 67 by shipping an API catalog with Link headers, an MCP server card, a skills index and an AI catalog file.

Model Context ProtocolCloudflareMarkdown
AgentReady.orgOraNick Launches+7

mcp, agentsยท Added 30 Oct 2026, published 29 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Rohan Paul (@rohanpaul_ai) on X

Rohan Paul's X post summarizes a TikTok paper on MCP attacks. LLM agents often finish the requested task, then quietly call an attacker-controlled logging tool that records the user query, the server reply and the final answer. The attack works because agents read natural-language tool descriptions when choosing and ordering tool calls. The visible text is truncated and gives no success rates or defenses.

Model Context ProtocolLLM
tool poisoningdata exfiltration

AI Securityยท Added 30 Oct 2026, published 29 Oct 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

Fragnesia (CVE-2026-46300) is a Linux kernel XFRM ESP-in-TCP logic bug in the Dirty Frag class that gives local attackers root, with a public PoC. CISA added it to the KEV catalog and ordered federal patching under BOD 26-04. Attackers chain it with PHP2Shell (CVE-2026-109618, CVE-2026-109619) to implant PHP webshells. Dream Security tied the chain to 25 rooted servers in the US, Japan, Taiwan and South Korea.

Linux kernelLinuxPHP+1
CVE-2026-46300CVE-2026-109618CVE-2026-109619+9

Threat Intel, Offensive Securityยท Added 30 Oct 2026, published 29 Oct 2026

eprint.iacr.orgpaper๐Ÿ›ก๏ธ Security

Cryptanalysis and Enhancement of VTBSAE: Provably Secure Verifier-Based PAKE Protocols for the Industrial Internet of Things

Cryptanalysis of VTBSAE, a verifier-based PAKE protocol for the Industrial Internet of Things, showing it fails to resist client impersonation after server compromise. The authors propose E-VTBSAEv1, which binds the client point E1 to fresh server randomness, and prove AKE security and forward secrecy in the random-oracle model under CDH. Raspberry Pi 4B tests show runtime comparable to VTBSAE with the same communication and storage overhead.

Raspberry Pi 4BPAKE
VTBSAEE-VTBSAEv1client impersonation after server compromise+3

Identity & Access, Hardware & RFยท Added 31 Oct 2026, published 29 Oct 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

New Cisco firewall zero-day exploited to crash SSL VPN devices

CVE-2026-76418 is a high-severity denial-of-service zero-day in Cisco ASA and Threat Defense (FTD) software, exploited in the wild in October 2026. Unauthenticated attackers send a crafted request to the SSL VPN (webvpn) when secondary authentication is set on a tunnel group, causing a device reload. Cisco offers no workaround besides disabling secondary authentication on tunnel groups. Shadowserver sees over 51,000 exposed ASA SSL VPN devices.

Cisco ASACisco Firepower Threat DefenseVPN
CVE-2026-76418CVE-2025-20362CVE-2025-20333+10

Threat Intel, Cloud & Infraยท Added 30 Oct 2026, published 29 Oct 2026

endorlabs.comarticle๐Ÿง  AI

What is an AIBOM? AI bill of materials explained for security teams | Endor Labs

An AIBOM is a machine-readable inventory of models, datasets, dependencies, AI services, agents and MCP servers, with evidence of origin, license, integrity and evaluation. The Endor Labs explainer walks through a worked CycloneDX example for a fine-tuned support assistant. It compares CycloneDX ML-BOM, SPDX 3.x, the OWASP AIBOM project and the May 2026 CISA/G7 guidance, and lists what an AIBOM cannot show: runtime behavior and agent actions.

CycloneDXSPDXSBOM+5
Endor LabsOWASPCISA+3

ai-policy, ai-infraยท Published and added 29 Oct 2026

endorlabs.comarticle๐Ÿ›ก๏ธ Security

What is an AIBOM? AI bill of materials explained for security teams | Endor Labs

AIBOM explainer from Endor Labs: an AI bill of materials is a machine-readable inventory of models, datasets, dependencies, AI services, agents and MCP servers, with origin, license and integrity evidence. It walks through a CycloneDX entry for a fine-tuned model, compares CycloneDX ML-BOM, SPDX 3.x, the OWASP AIBOM Generator and the May 2026 CISA/G7 minimum-elements guidance, and lists a six-step build process. It also states what an AIBOM cannot show: model safety, runtime behavior and coding-agent actions.

CycloneDXSPDXSBOM+2
EU AI ActISO/IEC 42001CISA+5

Supply Chain, AI Security, GRCยท Published and added 29 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Rohan Paul (@rohanpaul_ai) on X

Rohan Paul's X post summarizes the paper "Log-To-Leak: Prompt Injection Attacks on Tool-Using LLM Agents via the Model Context Protocol", from TikTok researchers. It reports that MCP-using agents often finish the requested task, then quietly call an attacker-controlled logging tool that records the query, server reply and final answer. The attack works through natural-language tool descriptions that agents read when choosing and ordering tools. The visible text is truncated.

Model Context ProtocolLLM
Log-To-Leakprompt injectionTikTok+1

AI Securityยท Added 29 Oct 2026, published 28 Oct 2026

orca.securityadvisory๐Ÿ›ก๏ธ Security

CVE-2026-101767: Critical Oracle EBS SQL Injection Actively Probed in the Wild

CVE-2026-101767 is a CVSS 9.8 unauthenticated SQL injection in Oracle E-Business Suite's Application Object Library, reachable through the /OA_HTML/AppsTCFServer servlet (GanttDataServer) and chainable to OS command execution. It affects versions 12.2.3 to 12.2.15 and was fixed in the October 2026 Critical Patch Update. Horizon3.ai found it, and Defused saw probing on honeypots on 27 October 2026. Interim mitigation is removing the servlet from the URL firewall allowlist.

Oracle E-Business Suite
CVE-2026-101767Horizon3.aiDefused+5

AppSec, Threat Intelยท Published and added 28 Oct 2026

bleepingcomputer.comarticle๐Ÿ›ก๏ธ Security

Police seize Virtualine bulletproof service tied to ransowmare, cybercrime

Virtualine, a bulletproof hosting service also operating as Secury, Massgod, Spamhouse, Lanedo and Omegatech, had its main domain seized by the FBI with German, Dutch and UK partners. Chainalysis and TRM Labs traced its Bitcoin payments to ransomware (5% of flows), a Russian drug market (about 44%), sextortion and the StealC infostealer. Dutch police seized dozens of servers in Limburg and recovered data on over 3,000 customers.

Bitcoin
VirtualineSecuryMassgod+14

Threat Intelยท Added 30 Oct 2026, published 28 Oct 2026

x.comthread๐Ÿง  AI

Eddy (@ieddysun) on X

Expo's official skills package gives AI coding agents scoped instructions for building Expo apps. One command, npx skills@latest add expo/skills --skill '*', installs it for Cursor, Copilot and Windsurf, while Claude Code and Codex use their plugin marketplaces. Skills include expo-router, expo-animation, expo-upgrade and eas-update. The Expo MCP server adds live docs lookup, compatible dependency installs, EAS build monitoring and simulator screenshots.

ExpoReact NativeExpo Router+9

coding-agents, prompting, mcpยท Added 29 Oct 2026, published 28 Oct 2026

horizon3.aiadvisory๐Ÿ›ก๏ธ Security

CVE-2026-20362 | Cisco Finesse Server-Side Request Forgery Vulnerability

CVE-2026-20362 is an unauthenticated server-side request forgery in Cisco Finesse (CVSS 3.1 score 7.2), found by Horizon3 researchers Noah King and Brandon Peterson. The embedded Apache Shindig content proxy fetches attacker-supplied URLs, including loopback services such as the Finesse REST API at 127.0.0.1:8082, which returns SystemInfo with node hostnames and the XMPP domain. Cisco published its advisory on 7 October 2026. Fixes are planned for January and February 2027, and no workaround exists.

Cisco FinesseApache ShindigNodeZero+1
CVE-2026-20362SSRFCWE-918+3

AppSecยท Added 29 Oct 2026, published 28 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

FoxIO disclosed three TLS flaws in the GoAhead embedded web server from EmbedThis, used on hundreds of millions of IoT, OT and network devices. CVE-2026-115881 (CVSS 9.1) leaves revoked client certificates accepted under mTLS with OpenSSL; CVE-2026-115884 (7.4) bypasses chain-length limits with LibreSSL; a third Mbed TLS bug (5.9, no CVE) weakens TLS 1.2 DHE. GoAhead 6.1.1 fixes the OpenSSL and Mbed TLS issues, and FoxIO released PoC code and fingerprints.

GoAheadOpenSSLMbed TLS+2
CVE-2026-115881CVE-2026-115884FoxIO+4

Hardware & RF, AppSecยท Published and added 28 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

A China-linked actor chained PHP2Shell (CVE-2026-109618, CVE-2026-109619) with the Fragnesia Linux kernel privilege escalation (CVE-2026-46300) to root firewalls and drop PHP webshells, per Dream. Using FOFA, the actor narrowed 19,000 firewalls to 240 targets and rooted 24 on 23-24 October. On two US government-affiliated devices it used a reverse SSH tunnel, hit the firewall management server, and attempted LDAP and Active Directory abuse.

PHPLinux kernelSSH+2
CVE-2026-109618CVE-2026-109619CVE-2026-46300+7

Threat Intel, Offensive Securityยท Published and added 28 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Kizuno18 (@Kizuno18) on X

Thread by Kizuno18 on the move from local stdio/Docker Model Context Protocol servers to remote HTTP/SSE endpoints in enterprise infrastructure. It names three trade-offs: credential boundary inversion (short-lived OAuth/JWT tokens instead of long-lived admin tokens on workstations), tool schema bloat solved by deferred discovery, and governance via HCP Terraform policy-as-code (Sentinel/OPA), audit trails and approvals. It is opinion, with no data or implementation detail.

Model Context ProtocolTerraformDocker+2
Sentinelblast radiuspolicy-as-code+1

AI Security, Identity & Access, DevSecOpsยท Added 29 Oct 2026, published 27 Oct 2026

x.comthread๐Ÿง  AI

Kizuno18 (@Kizuno18) on X

Kizuno18's X post argues that the move from local stdio and Docker MCP servers to remote HTTP/SSE endpoints matures the Model Context Protocol in enterprise infrastructure. It lists three trade-offs: short-lived OAuth/JWT bearer tokens replace mounted admin credentials, deferred tool discovery avoids roughly 20k tokens of eager schema loading, and HCP Terraform enforces Sentinel/OPA policy, audit trails and approvals server-side. Opinion post with no benchmarks or code.

Model Context ProtocolDockerTerraform+5
Kizuno18HCP TerraformOPA

mcpยท Added 29 Oct 2026, published 27 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Buchi Reddy B (@buchireddy) on X

Buchi Reddy B's X thread comments on Forever Security's research (Gal Weizman, Omer Samet) on coding agents. A web page silently writes a fake AGENTS.md or CLAUDE.md into a Downloads folder, and Codex and Claude Code follow it as project rules. Codex then wrote an attacker's MCP server into the machine-wide config, so one injection becomes a standing connection for every session. It asks whether teams inventory runtime MCP connections against approved lists.

CodexClaude CodeModel Context Protocol
Forever SecurityGal WeizmanOmer Samet+3

AI Securityยท Added 28 Oct 2026, published 27 Oct 2026

arxiv.orgpaper๐Ÿง  AI

CRISP: Co-designing Pruning and Scheduling for Efficient MoE Inference on Edge Servers

CRISP is a combination-aware framework that co-designs pruning and runtime scheduling for Mixture-of-Experts inference on memory-constrained edge platforms. It reorders neurons by importance so one stored expert supports several execution widths, gives hot, warm and cold expert combinations different widths, and overlaps expert loading with computation. On Mixtral-8x7B and DeepSeek-MoE-16B it raises throughput up to 2.1x at the same memory budget, with accuracy loss limited to 3.6%.

Mixture of Experts
Mixtral-8x7BDeepSeek-MoE-16BarXiv

inference, researchยท Added 28 Oct 2026, published 27 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

Tailscale Rushes Patches After Uncoordinated Disclosure of โ€˜Tailwormโ€™ Flaws

Tailworm is a set of 11 findings, published by Cyberdione Labs before patches, in Tailscale client 1.104.2 and headscale 0.29.5. Four of six high-severity bugs affect Tailscale SSH, where root-privileged forwarding safeguards can be bypassed, giving root on reachable servers and wormable spread at under a second per hop. Tailscale advises reviewing SSH policies and disabling forwarding until a patched client ships. No in-the-wild exploitation is reported.

TailscaleheadscaleSSH+2
TailwormCyberdione LabsMike Shaver+3

Offensive Security, AppSecยท Published and added 27 Oct 2026

x.comtool๐Ÿง  AI

Mauro Ubeda (@mauroubeda) on X

BibCode is an open-source desktop app, now in beta, for running coding agents side by side. It is built with Rust and Tauri rather than Electron, and runs Codex, Claude, Cursor and OpenCode, each in its own git worktree. It can also connect to remote BibCode Servers. The author, Mauro Ubeda, says it mixes ideas from T3 Code and Orca. The post gives no feature detail beyond this.

RustTauriGit+4
BibCodeMauro UbedaT3 Code+1

coding-agents, agentsยท Added 28 Oct 2026, published 27 Oct 2026

x.comthread๐Ÿง  AI

Rohan Paul (@rohanpaul_ai) on X

Hi3D v1.0 (formerly Sparc3D) is an open-sourced image-to-3D model from Hi3D, which runs a closed v3.0 refining at 2048 cubes per side. In a test with 13 professionals in 3D algorithms, 562 judgments against eight other image-to-3D models favoured it 83.5% of the time. The thread also covers the Hi3D Agent and an MCP server for other agents. Back and bottom views were checked, where TRELLIS.2 collapsed a winged figure.

Model Context Protocol
Hi3DHi3D v1.0Sparc3D+2

models, multimodal, mcpยท Added 28 Oct 2026, published 27 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover

Time4Popcorn, an abandoned Popcorn Time fork, has an updater (CVE-2026-30612) that fetches updates over HTTP without code signing and runs any executable the domain returns, as System/root. Eye Security registered abandoned update domains, saw millions of Windows, macOS and Android clients, and pushed a fix disabling the updater on about 2 million systems by March 2026. Shadowserver took over the sinkholed domains; Eye Security advises uninstalling the app.

Popcorn TimeWindowsmacOS+2
CVE-2026-30612Eye SecurityShadowserver Foundation+2

Threat Intel, AppSecยท Published and added 27 Oct 2026

eprint.iacr.orgpaper๐Ÿ›ก๏ธ Security

Alg\{Ossa\}: Decentralized Secure Aggregation with Rotating Committees and Eventual Delivery

AlgOssa is a decentralized secure aggregation protocol built on Ossa, a generic committee-aided, single-server construction for one-shot clients (following OPA and Willow, CRYPTO 2025). Ossa realizes secure aggregation with non-selective abort against a malicious server. AlgOssa adds Algorand-style sortition to rotate leaders and committees, bounds the chance of an honest server, and gives eventual delivery. Classical and post-quantum routes are evaluated.

Algorand
OssaAlgOssaOPA+2

otherยท Added 28 Oct 2026, published 27 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

cubillas (@cubillas888) on X

The tweet relays Pillar Security research that opencode on Windows and WSL could run attacker-controlled code during remote MCP server OAuth sign-in. The fix shipped in opencode 1.18.33 on 28 September, with no advisory or CVE published. It advises users of remote MCP servers to update and review which servers they connect to. Technical details are not in the post.

OpenCodeModel Context ProtocolOAuth+1
Pillar Security

AI Security, AppSecยท Added 29 Oct 2026, published 27 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Nicholas Martin (@ndgmlondon) on X

X thread started by Nicholas Martin (#IAM) advising that MCP tool permissions be verified and scoped session tokens used to enforce least privilege against indirect prompt injection. Replies argue that token scoping does not solve the confused deputy problem, because an injection borrows the agent's legitimate authority. They recommend per-task tokens with short expiry, with the grant logged beside the call, and raise MCP server dependency supply-chain risk.

Model Context Protocol
indirect prompt injectionconfused deputy

AI Security, Identity & Accessยท Added 28 Oct 2026, published 27 Oct 2026

arxiv.orgpaper๐Ÿ›ก๏ธ Security

Measuring Users' Security and Privacy Concerns About Third-Party Community Bots on Discord

Measurement study of 23,102 third-party Discord bots and 183,142 user reviews (2021-2026, 49 languages). A fine-tuned DeBERTa classifier plus manual validation yields 8,832 security and privacy reviews, mapped to a 31-theme taxonomy; Data Sharing (30.5%) and Data Collection (16.2%) dominate. Permission count and admin status correlate only weakly with user concerns. The authors build BotLens, an MCP-server auditing framework with six tools.

DiscordModel Context ProtocolLLM
BotLensDeBERTa

other, AI Securityยท Added 28 Oct 2026, published 27 Oct 2026

arxiv.orgpaper๐Ÿ›ก๏ธ Security

Log-To-Leak: Prompt Injection Attacks on Tool-Using LLM Agents via the Model Context Protocol

Log-To-Leak is a prompt-injection attack on tool-using LLM agents that abuses Model Context Protocol tool metadata to trigger an attacker-controlled logging call after the last legitimate call, leaking the user query, server name, server response and agent response. Evaluated on five MCP servers and four agents, it reaches 62.64-100% attack success with 76.55-95.64% logging accuracy. Three defenses leave over 55% residual ASR on GitHub MCP with GPT-4o.

Model Context ProtocolGitHubGPT-4o+1
Log-To-Leaktool poisoningprompt injection

AI Securityยท Added 28 Oct 2026, published 26 Oct 2026

decrypt.coarticle๐Ÿ›ก๏ธ Security

Bitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers

Electrum 4.8.3, released 24 October 2026, fixes a high-severity flaw in the Bitcoin wallet. Rogue servers could suppress a real payment and inject a fake unconfirmed transaction paying an attacker, so a user's fee-bump became the first transaction broadcast. The fix verifies signatures on wallet-owned inputs, but incoming transactions from external senders stay unverified. One user lost funds on 18 October.

ElectrumBitcoin
SomberNightdannydeezyRaju-K12+2

Blockchain, AppSecยท Published and added 26 Oct 2026

eprint.iacr.orgpaper๐Ÿ›ก๏ธ Security

LINE-Break: Cryptanalysis and Reverse Engineering of Letter Sealing

LINE-Break is a security analysis of Letter Sealing v2, the custom end-to-end encryption protocol in the LINE messenger. A TLS man-in-the-middle attacker or malicious server can replay, reorder and block messages undetected, and colluding users can forge message authorship in one-to-one and group chats. Stickers and URL previews leak plaintext. The attacks were verified on the real iOS app and an independent implementation.

LINEiOS
Letter SealingLetter Sealing v2Diego F. Aranha+1

Mobile Security, Offensive Securityยท Published and added 26 Oct 2026

orca.securitywriteup๐Ÿ›ก๏ธ Security

PHP2Shell: From the attackerโ€™s perspective

PHP2Shell is the public exploit for CVE-2026-109618 (corrupted internal state at the memory limit, allowing hijack during cleanup) and CVE-2026-109619 (double free used to leak memory and defeat ASLR). Orca ran the GitHub tool unchanged against an unpatched PHP server and got command execution. It then built its own exploit with AI from the patch, which worked on PHP 8.4.26 and WordPress. Fixed in 8.2.35, 8.3.36, 8.4.27 and 8.5.12.

PHPWordPressGitHub
CVE-2026-109618CVE-2026-109619PHP2Shell+3

Offensive Security, AI Security, AppSecยท Published and added 26 Oct 2026

x.comtool๐Ÿ›ก๏ธ Security

Brute (@BRuteLogic) on X

OBroken is Brute Logic's proprietary scanner for OAuth authorization bypasses. It covers 23 techniques across 17 vulnerability classes and produces a standalone Find/Forge/Fire PoC for each finding. The demo runs the missing audience validation case (CVE-2025-9803): it discovers the authorization server, gets a token bound to an attacker resource, and confirms the real API accepts it. A public OAuth bypass testbed accompanies it.

OAuth
CVE-2025-9803OBrokenjBroken+2

Identity & Access, Offensive Security, AppSecยท Added 28 Oct 2026, published 26 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Benjamin๐Ÿ‘จโ€๐Ÿ’ป (@Hislordship_9) on X

Thread on Forever Security's finding that a planted Markdown "Engineering Work Guidelines" file in ~/Downloads made Codex add a "project-tools" MCP server to ~/.codex/config.toml. The server ran npm install function-color, a known malicious package, and started a child session with --dangerously-bypass-approvals-and-sandbox. Codex complied in over 90% of the firm's tests; Claude Code, via a CLAUDE.md setting ANTHROPIC_BASE_URL, about half. Advice: don't start agents in Downloads, review instruction files, and diff agent config.

CodexClaude CodeModel Context Protocol+1
Forever Securityfunction-colorAGENTS.md+4

AI Security, Supply Chainยท Added 27 Oct 2026, published 26 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

PHP2Shell Exploitation Moves From Probes to Working Shells

PHP2Shell exploitation (CVE-2026-109618, CVE-2026-109619) reached working shells on 24 October 2026, when Perplexity researcher Adel Karimi's honeypots (PHP 8.4.26, Apache mod_php, single worker) logged 35 shells across three servers. Attackers used a four-stage HTTP chain: memory exhaustion, memory leak, then shell command execution, matching a public PoC. No second-stage payload was seen, and CISA had not added the flaws to KEV as of 26 October.

PHPApache
CVE-2026-109618CVE-2026-109619PHP2Shell+4

Threat Intel, AppSecยท Published and added 26 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts

Dutch police arrested two men, aged 23 and 25 from Vaassen and Ede, on October 6 over a bank helpdesk fraud that took over โ‚ฌ380,000 from 170 victims. Callers played AI-generated bank audio, then a fake bank employee had victims install an app and tap their card to the phone. The app read the NFC chip data and relayed it to an accomplice at an ATM. Police seized the servers.

NFC
Dutch policeNFC relay attackbank helpdesk fraud+1

Threat Intel, Hardware & RF, Mobile Securityยท Published and added 26 Oct 2026

coindesk.comarticle๐Ÿ›ก๏ธ Security

Bitcoin wallet bug let rogue servers steal funds when users tried to speed up payments

Electrum, a Bitcoin software wallet, disclosed on 24 October 2026 a flaw where malicious servers swapped pending transactions for fake ones with invalid signatures that the wallet did not check. When users chose Replace-by-Fee to raise the fee, Electrum signed a valid replacement paying the attacker, and at least one user lost funds. Version 4.8.3 adds signature checks; users of only trusted or self-run servers were not exposed.

ElectrumBitcoin
Replace-by-Feemalicious serverlookalike address

Blockchain, AppSecยท Published and added 26 Oct 2026

eprint.iacr.orgpaper๐Ÿ›ก๏ธ Security

Private Information Retrieval with Accountability at Erasure-Optimal Server Redundancy

SynTrace is a single-round compiler that adds accountability to linear private information retrieval (PIR). The client mixes the retrieval query with m audit queries, so audit syndromes identify up to d deviating servers among t colluding ones before reconstruction. The paper proves perfect query privacy and zero false identification within the threshold. For Shamir-based PIR it needs k=t+d+1 servers. For a 32 KiB record from a 1 GiB database it uses 2.25 MiB, against 8.96 MiB for the Eriguchi, Kurosawa and Nuida (TCC 2022) homomorphic-MAC construction.

SynTraceEriguchi-Kurosawa-Nuida homomorphic MACTCC 2022

otherยท Published and added 26 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

David Gutierrez | Eng (@david_x_ai) on X

Thread on a critical opencode bug disclosed by Pillar Security on Oct 19. On Windows and WSL, a remote MCP server could run code during OAuth sign-in, because the server-chosen authorization URL was put unescaped into a PowerShell command, so a PowerShell subexpression executed. opencode fixed it in 1.18.33 on Sep 28 as a browser-launch refactor with no advisory or CVE. MCP Inspector published an advisory for the same bug class, and its fix needs a major bump of the open package.

OpenCodeModel Context ProtocolPowerShell+3
Pillar Securitycommand injectionPowerShell subexpression+1

AI Security, AppSec, Supply Chainยท Added 27 Oct 2026, published 25 Oct 2026

x.comthread๐Ÿง  AI

SemiAnalysis (@SemiAnalysis_) on X

SemiAnalysis claims AMD chips running vLLM can earn up to $3 per chip-hour in profit serving the open-source Kimi K3 model, even after higher chip rental prices following Claude Code's rise. Kimi K3 has over 2.8 trillion parameters and fits AMD's 288GB per chip, while B200 cannot hold it in one server. B200 must then use tensor or pipeline parallelism over 400Gbit/s InfiniBand or Ethernet, which SemiAnalysis says is 18x slower than NVLink. The post gives no methodology.

vLLMClaude CodeNVLink+1
SemiAnalysisAMDKimi K3+1

inferenceยท Added 26 Oct 2026, published 25 Oct 2026

proton.metool๐Ÿ›ก๏ธ Security

Proton Flock Camera Map

Proton Flock Camera Map is a ZIP-code search map of Flock license plate reader locations. Its data comes from researcher Joshua Michael, who found in November 2025 that Flock's servers exposed an access token to anyone without login, and published his map in December. His inventory lists over 170,000 cameras and 130,000 other devices, about 40% above Flock's cited 120,000 cameras. The page also covers what Flock records and cites a Washington Post review of officer misuse.

Flock Safety
Joshua MichaelGarrett LangleyVehicle Fingerprint+1

OSINTยท Added 26 Oct 2026, published 25 Oct 2026

x.comtool๐Ÿง  AI

Dan Kornas (@DanKornas) on X

jshook is an open-source (AGPL-3.0) MCP server that gives AI agents a search-first, profile-aware reverse-engineering workspace for JavaScript, browser traffic, WASM and native processes. Agents start with a small searchable tool surface and move to workflow or full profiles only when needed. It drives Chromium or Camoufox over CDP, captures WebSocket traffic, has HTTP, GraphQL and Burp Suite helpers, and supports hot-reload plugins and declarative workflows. The post is a short announcement; the repository link is in a reply.

Model Context ProtocolJavaScriptWebAssembly+6
jshookDan Kornas

mcp, agentsยท Added 28 Oct 2026, published 25 Oct 2026

x.comtool๐Ÿง  AI

Agent Credit (@agentcredit_) on X

Agent Credit v1.3 is a remote MCP server that lets AI agents run credit checks on each other. It has six tools: score, compare, operator record, alerts and on-chain proof check. Calls are paid per use in USDC through x402 with no account or key. It also flags shared wallets, lists every token an operator launched and how each ended, and offers embeddable badges and wallet-signed record claims.

Model Context Protocolx402USDC+1
Agent Credit

mcp, agentsยท Added 26 Oct 2026, published 25 Oct 2026

x.comthread๐Ÿง  AI

Big Bull (@BIGBULLapp) on X

5ire is a desktop AI assistant and MCP client that connects to OpenAI, Anthropic, Google, Mistral, Grok, DeepSeek and Ollama from one window. It has a local knowledge base and tool calls over Model Context Protocol. The tools feature needs Python, Node and uv installed because it runs a local MCP server; without them it works only as a chat client.

Model Context ProtocolPythonNode.js+3
5ireOpenAIAnthropic+4

mcp, llm-appsยท Added 25 Oct 2026, published 24 Oct 2026

en.cryptonomist.charticle๐Ÿ›ก๏ธ Security

Electrum wallet security flaw is fixed after a user loses money in fee attack

Electrum 4.8.3, released 24 October 2026, fixes a flaw where a malicious server replaces a user's unconfirmed payment with a conflicting transaction carrying invalid signatures. If the user then bumps the fee with replace-by-fee, the wallet signs a payment to the attacker. One of two reporting users lost funds, and the patch now checks input signatures before accepting such transactions. Bull Bitcoin is adding the same client-side check.

ElectrumBitcoin
replace-by-feeBull BitcoinFrancis Pouliot

AppSec, Blockchainยท Published and added 24 Oct 2026

x.comthread๐Ÿง  AI

Gรถkdeniz Gรผlmez (@ActuallyIsaak) on X

An X post showing how to have Codex train a small model on Apple silicon through the mlx-lm-lora MCP server and skill. It gives five setup steps (pip install with the mcp extra, npx skills add, locate mlx-lm-lora-mcp, codex mcp add). The prompt runs four pre-training trials on tiny-random/qwen3 with the mlx-community/recycling_the_web-1k dataset. Codex picks the optimizer and learning rate itself, and the result is a table with validation loss and the best adapter path.

CodexMLXModel Context Protocol+5
mlx-lm-loraGoekdeniz-Guelmeztiny-random/qwen3+2

training, mcp, coding-agentsยท Added 25 Oct 2026, published 24 Oct 2026

x.comthread๐Ÿง  AI

Prasenjit Sarkar (@stretchcloud) on X

Post explaining Claude's new support for MCP Tasks and Elicitations. A server returns a durable task handle instead of blocking. The client polls tasks/get every 250 ms to 30 s, and states are working, input_required, completed, failed or cancelled. Elicitations pause a task at input_required for human approval. It also notes Cloudflare's stateless MCP servers and Code Mode, and Sentry and Linear adoption.

Model Context ProtocolClaude CodeGitHub Actions+3
AnthropicClaudeAWS+4

mcp, agentsยท Added 25 Oct 2026, published 24 Oct 2026

x.comthread๐Ÿง  AI

EveryDev.ai (@EveryDevAi) on X

ToolUniverse, from ScientistTools, is an open-source (Apache-2.0) toolkit that gives any LLM one interface to more than 1,000 scientific tools, models and databases such as PubMed, UniProt and ChEMBL. It ships a native MCP server, a Python SDK and a tu CLI, plus 68 pre-built agent skills. The post says it works with Claude Code, Cursor, Gemini CLI and Windsurf.

Model Context ProtocolPythonClaude Code+4
ToolUniverseScientistToolsPubMed+2

mcp, agentsยท Published and added 24 Oct 2026

x.comthread๐Ÿง  AI

Big Bull (@BIGBULLapp) on X

A post by BIGBULLapp on X about a TensorBlock GitHub index of Model Context Protocol servers, described as a TypeScript list so agents call tools someone has already wired up. It cites 1470 forks, 943 stars and 15 open issues. The author notes that curated lists go stale when a server changes its schema. The repository name is truncated in the post.

Model Context ProtocolGitHubTypeScript
TensorBlock

mcpยท Added 24 Oct 2026, published 23 Oct 2026

blog.cloudflare.comarticle๐Ÿ›ก๏ธ Security

Bringingย post-quantum cryptography to geographically fenced key management

Cloudflare's post-quantum GeoKey Manager, in closed beta for the Data Localization Suite, wraps customer private keys so only edge servers in an allowed region can unwrap them. It uses regional 256-bit root keys, derived application-specific HPKE key pairs (RFC 9180) with hybrid ML-KEM-768 and X25519, TPM-backed server authorization, kernel keyring storage, fail-closed checks, and soft and hard rotation. General availability is planned for Q1 2027.

CloudflareHPKEVault+2
GeoKey ManagerData Localization SuiteML-KEM+4

GRC, Cloud & Infraยท Added 29 Oct 2026, published 23 Oct 2026

endorlabs.comarticle๐Ÿ›ก๏ธ Security

ADLC Security Best Practices for Teams Shipping with Coding Agents | Endor Labs

ADLC Security Best Practices is an Endor Labs guide to controlling what AI coding agents can access, run, install and ship. It covers inventorying agents and MCP servers, sandboxing, pre-execution hooks instead of AGENTS.md rules, install-time package checks against slopsquatting and malware, reachability-based triage of agent PRs, and CI/CODEOWNERS protections. A five-step worked example and coverage metrics are included.

Model Context ProtocolClaude CodeCursor+3
slopsquattingindirect prompt injectiontool poisoning+5

AI Security, Supply Chain, DevSecOpsยท Published and added 23 Oct 2026

x.comthread๐Ÿง  AI

Yash Patil (@yvshpvtil) on X

leanrea is an 8 KB skill file that tells a coding agent which plain CLI tools to use for reverse engineering, replacing REA, a 207-tool MCP server. In the author's test it ran 38% faster and 35% cheaper, scoring 74/75 against 75/75. The author lists caveats: 3 runs per task, one model, one machine, and Claude with no skill was already decent.

Model Context ProtocolClaude
leanreaREAYash Patil+2

prompting, mcp, coding-agentsยท Added 25 Oct 2026, published 23 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Yash Patil (@yvshpvtil) on X

leanrea is an 8 KB skill file that tells a coding agent which plain CLI tools to use for reverse engineering, replacing the 207-tool REA MCP server. The author's test reports 38% faster, 35% cheaper, and a score of 74/75 against REA's 75/75. Caveats listed: 3 runs per task, one model, one machine, and Claude with no skill already performed decently. Replies question whether the lost point was a task where structured tool output beat parsing CLI text.

leanreaREAModel Context Protocol+1

Malware & RE, AI Securityยท Added 25 Oct 2026, published 23 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

PHP2Shell (CVE-2026-109618 and CVE-2026-109619, CVSS v4.0 9.2) are unauthenticated RCE bugs in PHP, patched on 21 October 2026. Sophos, Arctic Wolf and Hunt.io tie exploitation attempts to the Potassium Mirai variant, and VulnCheck built an ASLR-bypassing exploit. SOCRadar and Hunt.io found an exposed attacker server, and Qualys data shows about 110 million instances on end-of-life PHP. No confirmed compromise exists.

PHPApacheWiz+1
CVE-2026-109618CVE-2026-109619PHP2Shell+14

Threat Intel, AppSec, Offensive Securityยท Published and added 23 Oct 2026

coindesk.comarticle๐Ÿ›ก๏ธ Security

Bitcoin Core changes security rules as AI makes finding code bugs dangerously easy

Bitcoin Core merged a security policy change in October 2026 ending months-long embargoes for bugs that can be found with a simple LLM prompt. Such bugs get fixes backported to all supported versions and a point release with an advisory as soon as possible. Author Antoine Poinsot accepts less bake time. The piece cites the Bitcoin Red Team scan of 390 projects (4,962 findings, 85 critical), a BTCPay Server exploitation and the Coldcard drain.

Bitcoin CoreLLMBTCPay Server+2
Antoine PoinsotAntoine RiardBitcoin Red Team+1

AI Security, AppSecยท Published and added 23 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

Atlassian Patches 75 Flaws in Data Center and Server Products

Atlassian's October 2026 security bulletin lists 162 high and 14 critical third-party vulnerabilities across Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira Software and Jira Service Management. SecurityWeek counts 75 unique CVEs, six critical, in Tomcat, Bouncy Castle, Netty and Apache SSHD. Atlassian rates them non-critical for its use, reports no exploitation, and the critical CVE-2026-65905 appears on the portal but not in the bulletin.

ConfluenceJiraBitbucket+3
CVE-2026-65637CVE-2026-65182CVE-2026-68525+6

AppSec, Supply Chainยท Published and added 23 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

Iranโ€™s Prince of Persia APT Hosts C&C in US for First Time Since 2016

Prince of Persia (Infy), an Iranian state-sponsored APT active for nearly 20 years, hosted a Tornado second-stage C&C server in the US in July 2026, the first US hosting since 2016, according to Semperis researcher Tomer Bar. The group paused for three months after SafeBreach's February 2026 report, resumed on 27 May, and used Tonnerre to take over 1,800 files from one victim. The server sat on Namecheap shared hosting; on 24 August the group began a replacement behind Cloudflare. Semperis shared IoCs and advises watching for suspicious Telegram traffic.

TelegramCloudflareNamecheap
Prince of PersiaInfyTonnerre+4

Threat Intelยท Published and added 23 Oct 2026

github.blogarticle๐Ÿ›ก๏ธ Security

How bug bounty sharpens one researcherโ€™s security skills

GitHub Bug Bounty spotlight interview with @r31n, a researcher known for GitHub Enterprise Server findings. They describe a source-and-sink approach to mapping trust boundaries, chaining minor bugs (open redirect plus allowlisted SSRF that follows redirects), and confirming a finding only with a working PoC. They also cover using AI for code navigation and PoC scripts, and treating model output as untrusted input.

GitHub Enterprise ServerGitHubHackerOne
SSRFopen redirectXSS+3

Learning, AppSecยท Published and added 22 Oct 2026

x.comtool๐Ÿง  AI

Meku_SI (@MEKU_SI) on X

MEKU Human Cloud is an MCP server for agents that need a real person to do a task. It exposes three tools: search humans (read-only), request a human (a human operator reviews every request first), and check status. It is listed in the MCP Registry as farm.meku/human-cloud. The tweet gives no detail on pricing, humans available or request formats; those are in the linked docs.

Model Context Protocol
MEKU Human CloudMeku_SI

mcp, agentsยท Added 23 Oct 2026, published 22 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Nagli (@galnagli) on X

Tweet by Gal Nagli (galnagli) saying a Gemini model turned the GitLab advisory for CVE-2026-110264 into a working heap exploit in 17 minutes, with the full chain done in about another hour. The flaw is a CVSS 10.0 unauthenticated RCE on self-managed GitLab servers, affecting 12 years of releases, found by joaxcar. The post links a The Hacker News article and gives no technical details of the exploit.

GitLabGeminiCVSS
CVE-2026-110264Gal Naglijoaxcar+1

Offensive Security, AI Security, AppSecยท Added 23 Oct 2026, published 22 Oct 2026

aws.amazon.comarticle๐Ÿ›ก๏ธ Security

Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

AWS Security Blog guide to mitigating the PHP2Shell unauthenticated RCE flaws (CVE-2026-109618 and CVE-2026-109619, CVSS v4.0 9.2) with AWS WAFv2 rules. It covers rules for the PHP_SESSION_UPLOAD_PROGRESS trigger, blocking multipart/form-data, body size caps and rate limits, plus body inspection limits. It lists PHP fixes (8.5.12, 8.4.27, 8.3.36, 8.2.35) and server settings, and stresses WAF only reduces exposure.

AWS WAFPHPAWS+1
CVE-2026-109618CVE-2026-109619PHP2Shell+4

Cloud & Infra, Blue Team & Detection, AppSecยท Published and added 22 Oct 2026

x.comrepo๐Ÿง  AI

Dan Kornas (@DanKornas) on X

aula-mcp is an open-source (MIT) TypeScript MCP server that connects an AI client to Denmark's Aula school platform. It exposes tools for profiles, calendar events, messages, notifications, posts and weekly plans. MitID credentials and OAuth tokens are stored in macOS Keychain or an AES-256-GCM encrypted file. The HTTP server binds to 127.0.0.1, and the presence write tool stays off until AULA_MCP_WRITE=1 is set.

Model Context ProtocolTypeScriptClaude Code+3
AulaMitIDDan Kornas

mcpยท Added 23 Oct 2026, published 22 Oct 2026

eliastaylor.comarticle๐Ÿ›ก๏ธ Security

There isn't an easy exploit for this PHP vulnerability

Blog post from 21 October 2026 arguing that the recent PHP vulnerability (UAF chaining, tracked as PHP2Shell) has no easy working exploit, unlike Log4Shell, Heartbleed, Shellshock or the Rails YAML bug. The author says the many GitHub PoCs fail against vanilla PHP in Docker, or depend on a local-file-inclusion precondition or on an LLM modifying the target server. It also reflects on LLM-driven uniform judgement.

PHPDockerGitHub+2
CVE-2026-109618CVE-2026-109619PHP2Shell+5

AppSec, Offensive Security, AI Securityยท Added 22 Oct 2026, published 21 Oct 2026

eliastaylor.comarticle๐Ÿง  AI

There isn't an easy exploit for this PHP vulnerability

An opinion post from 21 October 2026 arguing that a widely feared PHP vulnerability has no easy exploit. The author says the many GitHub "PoC" repositories fail against a vanilla PHP instance in Docker. They claim LLM agents produced them by depending on a local-file-inclusion flaw or by modifying the server to be vulnerable. The author also argues that LLM defaults make many people's judgements identical.

PHPDockerGitHub+2
CVE-2026-109618CVE-2026-109619GPT+3

coding-agentsยท Added 22 Oct 2026, published 21 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

VibecodersHQ (@VibeCodrHQ) on X

Post summarising Pillar Security's finding of a remote code execution flaw in OpenCode, the open-source AI coding agent. Versions 1.0.137 through 1.18.32 could run code from a remote MCP server during OAuth sign-in on Windows and WSL, with no prompt injection needed. The fix is in 1.18.33 (released 28 September). No advisory or CVE was issued, so scanners will not flag old installs. Interim advice is to remove unvetted remote MCP servers.

OpenCodeModel Context ProtocolOAuth+1
Pillar SecurityOpenCode Console breach

AI Security, AppSecยท Added 22 Oct 2026, published 21 Oct 2026

x.comthread๐Ÿ›ก๏ธ Security

Swif (@swif_ai) on X

Swif (@swif_ai) reports that in the MCP TypeScript server SDK versions 2.0 to 2.2, a single server instance shared by several HTTP clients, which is the pattern the README shows, could send one client's responses to another client. Version 2.3.0 refuses this setup, so developers must build a server per request or per session. The post gives no CVE, advisory ID or technical detail.

Model Context ProtocolTypeScript
cross-client data leak

AI Security, AppSecยท Added 22 Oct 2026, published 21 Oct 2026

x.comthread๐Ÿง  AI

Swif (@swif_ai) on X

A post from Swif (@swif_ai) on the MCP TypeScript server SDK versions 2.0 to 2.2. A single server instance shared across HTTP clients, the pattern shown in the README, could send one client's responses to another client. Version 2.3.0 refuses that setup, so servers must be built per request or per session. The post gives no code or advisory ID.

Model Context ProtocolTypeScript
Swif

mcpยท Added 22 Oct 2026, published 21 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

SecurityWeek reports new Chrome protections against scams and social engineering. Enhanced Protection users get ClickFix detection that scrubs and sends copied suspicious commands to Safe Browsing, plus server-side Gemini scam analysis covering fake antivirus and browser update pages. Safe Browsing warnings now have a lower-confidence "suspicious site" level, and Chrome prompts before HTTP connections by default for everyone.

ChromeGeminiSafe Browsing
ClickFixEnhanced Protectionliving-off-the-land binaries

Blue Team & Detection, AI Securityยท Published and added 21 Oct 2026

aikido.devarticle๐Ÿ›ก๏ธ Security

Software supply chain security best practices for 2026

Aikido's guide to software supply chain security controls for 2026, tied to real incidents. It covers a 48-hour package cooldown, ignore-scripts, lockfile enforcement, SHA and digest pinning, scoped tokens, FIDO2, developer endpoint protection, extension allowlists, agent sandboxing, MCP server vetting, slopsquatting, signed SBOMs and rotation drills. Examples include the March 2026 axios compromise and the March 2025 tj-actions/changed-files attack.

npmpnpmGitHub Actions+3
tj-actions/changed-filesCanisterWormGlassWorm+7

Supply Chain, DevSecOps, AI Securityยท Added 22 Oct 2026, published 21 Oct 2026

blog.cloudflare.comarticle๐Ÿง  AI

How Commerce.com and Cloudflare are getting storefronts ready for AI agents

Cloudflare and Commerce.com describe enabling WebMCP, Google's proposed browser standard for exposing structured tools to AI agents, across almost 100,000 storefronts. Cloudflare injects a bridge script at the edge that proxies tools from Commerce.com's backend MCP server. Per-merchant opt-out uses Configuration Rules and custom hostname metadata, and a configurable MCP URL (/api/mcp) was added.

WebMCPModel Context ProtocolCloudflare+3
Commerce.comGoogleKristina Pototska+1

mcp, agentsยท Added 29 Oct 2026, published 21 Oct 2026

layerfs.aitool๐Ÿง  AI

LayerFS: The filesystem for AI coding agents

LayerFS is a serverless, versioned filesystem for AI coding agents. Every file or Bash tool call becomes a commit on a branch, agents on different machines share one Store without a database server, and same-file clashes are refused with Conflict. Forks copy no files, chunks are deduplicated and compressed, and ignored dependency files persist, so a mount takes about 0.05 s against about 5 minutes of reinstalling. The page gives vendor claims and no benchmarks or docs.

Git
LayerFS

coding-agents, ai-infra, agentsยท Added 22 Oct 2026, published 21 Oct 2026

snyk.ioarticle๐Ÿ›ก๏ธ Security

AI Model Risk Depends on What the Model Can Reach

Snyk's State of Agentic AI Adoption Volume III scores models against 29 attacker goals (0 to 1,000) and matches them to AI-BOM scan data from 1,693 environments. 74.5% reference a model scoring 500+ on some goal and 49.2% one scoring 750+. Risk depends on agent and MCP server reach, and the fix is either switching models or tightening application controls, depending on the goal. Only 37.5% of model occurrences have a score.

SnykModel Context ProtocolLLM
State of Agentic AI Adoption Volume IIIAI-BOMEpoch Capabilities Index+2

AI Security, GRCยท Published and added 21 Oct 2026

horizon3.aiadvisory๐Ÿ›ก๏ธ Security

CVE-2026-101767 | Oracle E-Business Suite TCF SQL Injection and Remote Code Execution

CVE-2026-101767 is an unauthenticated SQL injection in the Oracle E-Business Suite Thin Client Framework servlet (/OA_HTML/AppsTCFServer, oracle.apps.fnd.tcf.SocketServer), CVSS 3.1 9.8. It runs SQL as the APPS user and chains to OS commands as the EBS account. Affects 12.2.3 to 12.2.15, fixed in the Oracle October 2026 CPU (20 October 2026). The page lists mitigations, IOCs and a timeline.

Oracle E-Business SuiteCVSS
CVE-2026-101767CWE-89Horizon3.ai+3

AppSec, Offensive Security, Blue Team & Detectionยท Added 29 Oct 2026, published 20 Oct 2026

eprint.iacr.orgpaper๐Ÿ›ก๏ธ Security

DISCO*: DIstributed and SCalable Oblivious Joins and Oblivious Primitives

DISCO is a distributed, fully oblivious database system that combines hardware enclaves (TEEs) with oblivious primitives to hide access patterns from side-channel and leakage-abuse attacks. New distributed frameworks and communication optimizations let it run in parallel across servers. It reports 88x speedup over Jodes and 180x over SODA on non-foreign-key joins with 2^25 elements, and the first terabyte-scale results.

DISCO
JodesSODASOSP 2026

Hardware & RFยท Added 21 Oct 2026, published 20 Oct 2026

securityweek.comarticle๐Ÿ›ก๏ธ Security

AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

AOMEI Backupper, Windows backup and cloning software, served malware in short tampering windows between April and July 2026. Threat actor UNC7017 altered the update settings file and notification service to push the CrossRoad downloader, ShinyRoad backdoor, a modified Radmin Server and Adaptix payloads. Each window lasted five to ten minutes. The client did not authenticate its configuration files, and a WebDAV banner trick leaked NetNTLMv2 hashes.

AOMEI BackupperRadmin ServerAdaptix+2
UNC7017CrossRoadShinyRoad+5

Supply Chain, Threat Intelยท Published and added 20 Oct 2026

horizon3.aiwriteup๐Ÿ›ก๏ธ Security

CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE

CVE-2026-106173 is an unauthenticated arbitrary file write in the FortiSIEM phQueryMaster gRPC service on tcp/27918, advised by Fortinet on 13 October 2026. The SendQueryResult handler concatenates an attacker-controlled query-id into a path, and a null byte in the header removes the server-added filename suffix. Overwriting /opt/charting/redishb.sh, run every 60 seconds by cron, gives root-level code execution. IOCs are file timestamps.

FortiSIEMgRPCLinux
CVE-2026-106173CVE-2023-34992CVE-2024-23108+6

Offensive Security, AppSecยท Added 29 Oct 2026, published 20 Oct 2026

x.comadvisory๐Ÿ›ก๏ธ Security

lee1981 (@lee1981b) on X

CVE-2026-77932 affects DB-GPT through 0.8.2 (dbgpt-app). The /api/v1/chat/react-agent route accepts unauthenticated requests because get_user_from_headers returns an admin-role user, and the ReAct agent can reach unsandboxed Python and shell tools. Lasso reported root in the webserver container in a lab. The post gives CVSS 9.8 and 9.3, no verified fix (0.8.2 is still the latest release), no KEV match, no EPSS data, and a SOC hunting trail.

DB-GPTPythonDocker+3
CVE-2026-77932CWE-306Lasso+4

AI Security, AppSec, Blue Team & Detectionยท Added 23 Oct 2026, published 20 Oct 2026

x.comthread๐Ÿง  AI

Paulo Pierrondi | AI agents (@paulopierrondi) on X

Paulo Pierrondi's X post, part 9 of a series on installing MCP servers, lists a monthly review of installed servers. The checks are which tools the agent used, servers not called in weeks, overlapping tools that confuse the model, and whether each server still has an owner. A reply adds a decommissioning check: after removal, confirm the server's old credentials can no longer call the backend.

Model Context Protocol
Paulo Pierrondi

mcpยท Published and added 20 Oct 2026

x.comtool๐Ÿง  AI

G (@gg_guy03) on X

WhatThePort for Linux is a Rust utility that lists the dev servers still running in the background, the project that started each one, and its RAM use. It links each server to the Claude Code or Codex session that launched it, and stops the whole process tree without touching databases. The CLI offers `wtp`, `wtp stop <port>` and `wtp --json`. A reviewer notes the Codex resolver keeps the newest transcript per working directory, so session matches can be wrong.

RustLinuxClaude Code+1
WhatThePort

coding-agentsยท Added 20 Oct 2026, published 19 Oct 2026

Showing 120 of 695

Show more