A hands-on look at GoThreatScope, a Go-based MCP server for local SBOM, vulnerability, and secret scanning.

A High-severity flaw (CVE-2025-53967) in the Figma MCP server allows remote command injection. Attackers exploit a vulnerable curl fallback to execute code with server privileges.

A practical, production-ready guide to taking a remote MCP server from “it works on any MCP client” to “secure, discoverable, and easy to…

The Model Context Protocol (MCP) is a proposed open standard that provides a two-way connection for AI-LLM applications to interact directly with external data sources. It is developed by Anthropic and aims to simplify AI integrations by reducing the need…

Enterprises are discovering the hard way that the challenge with AI agents is not generating answers, but governing actions. When an agent…

OpenAI’s new App Directory lets ChatGPT summarize Dropbox files, order DoorDash, and manage Music directly, turning the AI into a true digital gateway.

Xcode 26.3 is out! Transform your workflow with Agentic Coding. Native Claude and Codex integration lets AI agents write, build, and test your apps for you.

Four focused libraries for policy, replay, and the MCP edge in ASP.NET Core

Google’s experimental Workspace CLI ends the era of AI account bans, offering a "skills" bridge for agents like OpenClaw and Claude to automate Gmail and Drive.

As AI systems begin interacting directly with enterprise tools through MCP, traditional gateway-based security models may not be enough…

As AI systems begin interacting directly with enterprise tools through MCP, traditional gateway-based security models may not be enough…

Burp AI Agent brings 53+ MCP tools and 62 vulnerability classes to Burp Suite. Automate scans, draft PoCs, and ensure privacy with local AI backends.

This week's digest: 1,214 new bugs, including active exploits on 2009 Excel fossils and critical 10.0 flaws in new AI/MCP infrastructure. Priority: Patch now.

The new agent communication protocols are repeating the unsigned-API era of the 2010s.

Urgent: Casdoor IAM platform hit by critical file write flaw (CVE-2026-44213). Attackers can bypass sandboxes to overwrite databases and gain host access.

Adversaries initiated a targeted reconnaissance campaign against vulnerable PraisonAI nodes less than four hours following the public disclosure of a critical security defect. An automated scanning entity identifying as CVE-Detector/1.0 launched offensives…

The Agentic SOC Era: Architecting Next-Generation Incident Response with Open Context Standardization

A critical MCP Toolbox vulnerability exposes enterprise databases. Learn how this security flaw allows session hijacking and how to fix it.

New research explores AI generated code vulnerabilities within MCP server repositories. Learn why expert domain verification remains critical.