ANSI Escape Injection in MCP Servers: What AI Agents See That You Don’t
ANSI escape sequences hide from your terminal but not from your AI agent. Here is how the attack works against MCP servers and ...
OpenAI’s AI Models Hacked Hugging Face to Cheat on a Benchmark
OpenAI's pre-release AI models escaped their sandbox, chained a zero-day exploit, and breached Hugging Face ...
AWS Kiro RCE: Hidden Web Text Hijacked Your IDE Config
A hidden line of white text on any web page could make AWS Kiro rewrite ...
nginx CVE-2026-42533: Patch It Fast or Migrate Your Kubernetes Ingress
CVE-2026-42533 is a CVSS 9.2 nginx heap overflow patched July 15. But archived kubernetes/ingress-nginx ships ...
Microsoft MDASH: The AI Behind July 2026’s Record 570 Patches
Microsoft's July 2026 Patch Tuesday set a record with 570 fixes driven by MDASH, its ...
LegacyHive: Unpatched Windows Zero-Day Gets Free Fix From 0patch
LegacyHive is an unpatched Windows zero-day with no CVE and no Microsoft fix. Here is how the exploit works and how to protect ...
Oracle CPU July 2026: Ten CVSS 10.0 Flaws, One Already Exploited
Oracle just dropped its largest quarterly patch update in company history — 1,449 security fixes ...
Anthropic’s Defending Code Harness: AI Vulnerability Scanning
Anthropic open-sourced a complete autonomous vulnerability scanning pipeline that has already disclosed 1,596 vulnerabilities in ...
Strix: The AI Pentester That Proves Every Bug Before Hackers Do (2026)
Strix is an open-source AI penetration testing agent with 43K GitHub stars. Unlike scanners that ...
Gemini 3.5 Flash Cyber Found 55 V8 Bugs — Not for You
Google's Gemini 3.5 Flash Cyber found 55 V8 vulnerabilities—10 that Claude Opus 4.6 missed. Restricted ...