RCE by design: MCP architectural choice haunts AI agent ecosystem
According to Anthropic and other MCP adapter developers, the STDIO command execution behavior is by design and the responsibility of sanitizing MCP configurations falls with…
Author: Cybernoz
The Q1 vulnerability pulse
Welcome to this week’s edition of the Threat Source newsletter. The first quarter of 2026 passed faster than a misconfigured firewall rule gets exploited — and the…
7 Don’ts of Security Awareness Training
Security awareness training (SAT) is needed now more than ever. Just look at the barrage of ransomware attacks debilitating healthcare. And it’s no longer just…
Microsoft: Some Windows servers enter reboot loops after April patches
Microsoft has confirmed that some Windows domain controllers are entering restart loops due to Local Security Authority Subsystem Service (LSASS) crashes after installing the April…
Fiverr Allegedly Leaks User Information to Google Indexing, Researchers Say
Freelance service platform Fiverr is facing a significant privacy incident after researchers discovered that sensitive customer files are publicly accessible and indexed by Google search.…
Nexcorium Mirai Variant Weaponizes TBK DVR Vulnerability in Fresh IoT Botnet Push
A newly discovered Mirai malware variant named Nexcorium is actively targeting unpatched Internet of Things (IoT) devices. According to recent threat research from FortiGuard Labs,…
New Mirai Variant Nexcorium Hijacks DVR Devices for DDoS Attacks
Cybersecurity researchers at Fortinet’s FortiGuard Labs have found a new malware that is taking over smart devices across the globe. This threat, named Nexcorium, is…
Mozilla challenges enterprise AI providers with Thunderbolt, open-source AI client under your control
For organizations that want to keep company data within their own systems and have more control over how AI is deployed, Mozilla is offering an…
Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet
Ravie LakshmananApr 18, 2026IoT Security / Vulnerability Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet…
AI, energy, and the new rules of cloud sustainability competition
The cloud industry has long promoted a reassuring sustainability narrative: Hyperscalers are more efficient and renewables for energy are growing, which means shifting workloads off‑premises…
Amazon to buy satellite firm Globalstar in US$11.5 billion deal
Amazon.com will acquire Globalstar in an US$11.57 billion ($16 billion) deal, bolstering its fledgling satellite business as it tries to catch up with Elon Musk’s…
Lawmakers Gathered Quietly to Talk About AI. Angst and Fears of ‘Destruction’ Followed
A congressional subcommittee on Thursday held a roundtable discussion on the potential of artificial intelligence, which took a turn toward the existential as each lawmaker…