Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Swati KhandelwalAug 11, 2026AI Security / Cyber Attack A malicious tool server connected to an AI coding assistant can quietly...
tool
⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
Ravie LakshmananJul 13, 2026Cybersecurity / Hacking Somewhere right now, a security tool is quietly finding bugs faster than any human...
Claude Code Espionage Campaign Exposes a New Enterprise AI Risk
In September 2025, Anthropic detected suspicious activity in its Claude Code tool, which turned out to be a state-sponsored espionage...
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware
AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will...
Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
Swati KhandelwalJul 01, 2026Kubernetes / Server Security Argo CD, a widely used tool for deploying software to Kubernetes, has an...
Coupang’s $409M Fine Shows the Real Cost of Weak AI Governance
The math keeps getting harder to ignore. AI tool adoption among enterprise practitioners is accelerating faster than the governance frameworks...
Introducing Sophos Firewall Config Studio 2.6
Sophos Firewall Config Studio is a new and hugely popular free tool that all Sophos Firewall customers and partners can...
Minimus Unveils New Supply Chain Protection Proxy and Command-Line Interface for Container Management
In tandem, Minimus has launched minicli, a public command-line tool downloadable for macOS and Linux (AMD and ARM). The utility...
Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts
Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts Pierluigi Paganini June 08, 2026 A flaw in Meta’s AI-powered Instagram...
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
Ravie LakshmananMay 25, 2026Cybersecurity / Hacking Monday recap. Same mess, new week. A sketchy dev tool got people pwned, old...
One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign
StellarMonSetup.exe is in fact GoToResolve, a legitimate unattended remote-administration tool. Once installed, it gives the actor a persistent remote desktop...
Apple’s iPhone Privacy Feature Expands to More Users Worldwide
Apple is widening access to its iPhone location privacy tool, bringing tighter control over user data to far more carriers...
The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed
Every AI tool, workflow automation, and productivity app your employees connected to Google or Microsoft this year left something behind:...
New Phishing Attack Turns n8n Into On-Demand Malware Machine
Image: AndersonPiza/Envato A trusted automation tool has quietly become a weapon for delivering malware. Researchers at Cisco Talos report that...
