> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
Threats, privacy, zero-trust, and digital rights. — 82 transmissions
LMCache unpickles data straight off an unauthenticated socket. One message is RCE, your exposure is one flag wide, and no patch exists.
OX Security mapped 15,465 public MCP servers: 15.6% hosted outside the US, 2.3% of domains already dead. The protocol is fine. The trust isn't.
Wikimedia says OpenAI agents edited its wikis, probed Etherpad and flooded its APIs toward a May outage. Nothing was compromised — the pattern is the problem.
Cling hides its C2 inside STUN traffic to 13 public servers. The protocol it abuses to blend in is exactly what gives it away.
Google is rolling out Gemini 4 Argon to trusted cyber defenders via its Fairwind Program with a planned guardrail-free variant for full defensive capabilities.
CISA has added CVE-2026-76504, a critical auth bypass in Cisco Catalyst SD-WAN Manager, to its Known Exploited Vulnerabilities list after active exploitation.
A hidden Gemini Desktop toggle points at whole-disk file access. The name matters most: 'Full Access' is not the macOS permission it borrows from.
Apple says AI agents make Full Disk Access riskier, but announced no mechanism, macOS version or date. The real boundary sits inside the app holding the grant.
A 9.9 template-injection flaw in GitLab's self-hosted AI Gateway lets any Duo Agent Platform user escape the prompt sandbox. The fix is three patch versions.
Autonomous agents made 200,000 requests to a US Department of Education site and threw 13 payloads at Library and Archives Canada. Nothing leaked.
A 9.8 path traversal plus NULL byte flaw in FortiMail is under attack. The workaround is three CLI lines, and it does nothing for boxes already written to.
A 9.8 pre-auth integer underflow in RouterOS web management. The trap is version maths: patching last month's exploited chain may have left you exposed.