How Cloudflare detects MCP traffic and helps secure it
Most companies designed their resource permissions with a human user in mind. A senior engineer may be able to deploy to production, query a sensitive database, or revoke another user’s…
-
-
Metasploit Wrap Up: Lot of summer shells and fit http profiles
This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000,…
-
Trezor ShipMonk Breach Exposes Nearly 14,000 Customers
Trezor, the Prague-based manufacturer of cold crypto storage devices, disclosed a significant data breach on Thursday that exposed the personal information of nearly 14,000 customers. The incident, which the company…
-
How to reduce cybersecurity backlogs and fix vulnerability debt
An increasing backlog indicates a failure in the operating model Security teams often become the default owners of any issue labeled as a security concern. For example, when a scanner…
-
Capability Is Closing the Open-Closed Gap; Security Is Not
Introduction Sixteen new models joined the CASI evaluations in August. Anthropic’s claude-fable-5 debuted at the top of the board on both security and capability, and xAI’s grok-4.5 debuted at the…
-
Can AI invent new attack techniques? New research from James Kettle and PortSwigger Research
Kieron Hughes | Wednesday, 12 August 2026 at 09:04 UTC We already know AI can find vulnerabilities. James Kettle, PortSwigger’s Director of Research, wanted to answer a harder question: can…
-
Putting OpenAI Cyber Models to Work for Defenders
Unit 42 is putting the latest frontier cyber models to work across customer environments to find, validate and help remediate the attack paths that matter most. In May, we introduced…
-
The Good, the Bad and the Ugly in Cybersecurity – Week 33
The Good | Courts Sentence “The Com” Online Syndicate Member for Blackmail & Sextortion A court in the UK has sentenced a member of the decentralized online cybercrime collective known…
-
The Agentic AI Security Adoption Matrix: Autonomy Scales Where Control Exists
Agentic AI is crossing a threshold. It is no longer just generating content or answering questions. It is beginning to plan, decide, and execute actions across tools, systems, and workflows….
-
August 2026 Patch Tuesday: Updates and Analysis
Exploited Zero-Day Vulnerability in Windows Ancillary Function Driver for WinSock CVE-2026-68820 is an Important elevation of privilege vulnerability affecting the Windows Ancillary Function Driver for WinSock and has a…
