How MCP Servers Can Expose Enterprise Secrets
https://ift.tt/o4SY8Ni servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection,
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
https://ift.tt/qJgt6Si weeks have one big security story. Others bring many smaller updates that are easy
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability,
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
Some weeks have one big security story. Others bring many smaller updates that are easy
OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models’ Reasoning
https://ift.tt/1EWxLqj newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
https://ift.tt/E0xhbWX researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
https://ift.tt/Os6VF0d researchers found a way to enter Microsoft SharePoint servers as any user, including an
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
https://ift.tt/7Z6YNlL malicious tool server connected to an AI coding assistant can quietly walk off with