On June 4, Asana identified a bug in its Model Context Protocol (MCP) server and took the server offline to investigate. While the incident was not the result of an external attack, the bug could have exposed data belonging to… Read More "Asana Discloses Data Exposure Bug in MCP Server"
AI security company Zenity has disclosed the details of two AI browser hacking techniques targeting Claude in Chrome and ChatGPT Atlas, demonstrating how they can be used for account takeovers, phishing, and making unauthorized Amazon purchases. Zenity described its research… Read More "Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts"
Swati KhandelwalAug 06, 2026OT Security / Vulnerability Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407… Read More "Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities"
The updated Cybersecurity Maturity Model Certification (CMMC) represents a critical evolution in the Department of War (DoW) strategy to secure the Defense Industrial Base (DIB). It is more than a regulatory hurdle. It is a direct response to a rapidly… Read More "You’re only as secure as your last evaluation"
Crypto thieves are increasingly looking to steal virtual currency from victims in physical attacks, with tens of millions lost so far this year, according to a new Chainalysis report. The blockchain analytics firm revealed new information from its forthcoming mid-year… Read More "Violent Physical Crypto Thefts Surge to $30m in Losses"
%20(1).png?w=1140&fit=1140,855&ssl=1 "What is Shadow SaaS? Causes, Risks, and Management Tips")
Security teams are familiar with the comforting sense of safety that comes from utilizing security controls like Single sign-on (SSO) providers to manage their organization’s major applications and critical tools. When these applications are routed through Okta, Azure AD, or… Read More "What is Shadow SaaS? Causes, Risks, and Management Tips"
An authorization bypass in Paperclip could have allowed remote attackers to obtain arbitrary code execution with the server’s permissions, Oasis Security reports. Paperclip is an AI management platform that allows organizations to operate autonomous AI agents at scale. It supports… Read More "Critical Paperclip Flaw Allowed Admin Access, Code Execution"
Swati KhandelwalAug 06, 2026Database Security / Endpoint Security Attackers broke into an organization’s Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to disk. They fed Java source… Read More "Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access"
Regulatory bodies have also failed to keep up with or understand the industry’s rapid advancements. The US has no binding legal framework that would have required a different response from OpenAI, as labs are only beholden to voluntary commitments weighed… Read More "Why the ‘rogue AI’ problem will lead to an era of headaches for security practitioners"
A Canadian cybercriminal has pleaded guilty in a US court to involvement in the widespread compromise of Snowflake customer accounts, which enabled a lucrative extortion campaign. On August 5 2026, Connor Riley Moucka, aged 26, from Ontario, pleaded guilty to… Read More "Canadian Hacker Pleads Guilty Over Snowflake Extortion Campaign"
