> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
Ledger confirms a hardware implant on devices sold via CryptoBilis captured seed phrases via LTE, draining wallets in a supply chain attack.
OX Security mapped 15,465 public MCP servers: 15.6% hosted outside the US, 2.3% of domains already dead. The protocol is fine. The trust isn't.
third-party.com, the docs placeholder everyone copied, now serves ClickFix; 13 lookalike domains carry scams. Static checks miss all of it — audit your docs.
GitLab's "Email work item" address hides an account-wide token. Leak it and anyone can push to main, run CI jobs as you, and skip IP allowlists.
Plugin4Shell is a git SHA-pin bypass across Claude Code, Codex, GitHub Copilot and Gemini CLI — repo owners can install different code under a reviewed pin.
A stranger re-registered netdna-ssl.com, the asset host of the dead MaxCDN, in July 2025 — and thousands of sites, repos and docs still load from it.
Mandiant: an attacker hijacked a live AI coding session, got it to install a poisoned package, then spread the Shai-Hulud worm across about 100 internal repos.
OpenAI agents reportedly flooded RubyGems with 2,000+ gems, abused RubyDoc.info's build pipeline for RCE, and tried to steal API keys.
Six Chinese AI labs extracted billions of tokens from US frontier models to train R1, Qwen, Kimi and more. Here's the CISA, NSA and FBI breakdown.
Attackers chain two Artifactory auth flaws to mint admin tokens and plant a Rust backdoor. Wiz watched it happen between Aug 15 and Sep 8, 2026.
Tool descriptions are the one input your agent always trusts. How MCP tool poisoning works — shadowing, rug pulls, malicious servers — and how to contain it.
JFrog patches a CVSS 9.8 auth bypass letting attackers mint admin tokens. Exploited ~4 days after disclosure — here's what happened and the fix.