Knostic found 1,862 MCP servers exposed with zero authentication. Here are five actions CISOs should take now.

IntroductionIn September 2025, Zscaler ThreatLabz identified two campaigns, tracked as Gopher Strike and Sheet Attack, by a threat actor that operates in Pakistan and primarily targets entities in the ...

Prompt injection lets risky commands slip past guardrails IBM describes its coding agent thus: "Bob is your AI software development partner that understands your intent, repo, and security standards." ...

A multi-stage phishing campaign targeting Russia abuses GitHub and Dropbox to disable Microsoft Defender and deploy Amnesia ...

Anthropic’s official Git MCP server hit by chained flaws that enable file access and code execution - SiliconANGLE ...

A newly patched SmarterMail flaws is being exploited in the wild, allowing attackers to reset admin passwords and gain SYSTEM ...

California taco trucks that turn a quick craving into a full-blown mission, chasing bold flavors, street legends, and ...

Hackers are on the hunt for open telnet ports in servers after discovering that a version of legacy client-server application ...

Critical vulnerabilities in edge devices are continuing to be discovered by security researchers and rapidly targeted by attackers. Lately this includes a critical ...

Researchers found the popular model context protocol (MCP) servers, which are integral components of AI services, carry ...