Researchers with Cyata and BlueRock uncovered vulnerabilities in MCP servers from Anthropic and Microsoft, feeding ongoing security worries about MCP and other agentic AI tools and their dual natures ...

Microsoft has patched 112 vulnerabilities in January 2026, including CVE-2026-20805, a Desktop Window Manager zero-day that attackers are actively exploiting.

High-severity flaws in the Chainlit AI framework could allow attackers to steal files, leak API keys & perform SSRF attacks; ...

DOGE employees also shared Social Security data using the third-party server Cloudflare, and according to new court documents ...

Security researchers uncovered two vulnerabilities in the popular Python-based AI app building tool that could allow ...

Microsoft has launched its Model Context Protocol (MCP) for Azure Functions, ensuring secure, standardized workflows for AI ...

The patched issues span core standard library components including archive/zip and net/http, as well as security-sensitive ...

Overview On January 14, NSFOCUS CERT detected that Microsoft released the January Security Update patch, which fixed 112 security issues involving widely used products such as Windows, Microsoft ...

If it isn't encrypted by default, I don’t want it anywhere near my terminal.

Access your files via web, directly from your disk. if you cannot access the console (like when you are running as a service), you can edit the config file to add your admin account if you don't want ...

Today is Microsoft' 2026 Patch Tuesday with security updates for 114 flaws, including one actively exploited and two publicly ...

CVE-2025-55182 (also referred to as React2Shell and includes CVE-2025-66478, which was merged into it) is a critical pre-authentication remote code execution (RCE) vulnerability affecting React Server ...