New Enterprise-Ready MCP Specification Brings New Security Challenges
MCP is evolving from a single-user server to an enterprise-ready server fit for expanded cloud-native AI usage. Companies have 12 months to get ready. The…
Category: SecurityWeek
Russian APT Deploys ‘StockStay’ Backdoor Against Ukrainian Targets
Russia-linked APT Turla has been targeting government and military organizations in Ukraine with a new backdoor specifically designed for espionage, Google Threat Intelligence Group (GTIG)…
$3 Million Reportedly Stolen in Polymarket Hack
Decentralized prediction market Polymarket has promised to fully refund users affected by a hacker attack that came to light this week. Polymarket is a cryptocurrency-based…
Chinese Framework Powers 200,000 Scam Sites
More than 200,000 websites are using investment scam templates built with the Chinese open source framework Uni-App, Infoblox reports. A cross-platform development toolkit, Uni-App allows…
Linux Foundation Unveils New Open Source Security Project Akrites
The Linux Foundation on Thursday announced a new industry effort aimed at efficiently addressing vulnerabilities in the open source software (OSS) ecosystem. Named Akrites, it…
In Other News: Chinese Mythos-Like AI, Tata Electronics Breach, Snyk Layoffs
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader…
More Klue Breach Victims Identified as Hackers Get Hacked
Roughly two dozen Klue customers have come forward and confirmed that their Salesforce instances were compromised in a supply chain attack earlier this month. The…
Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories
Researchers at Wiz have disclosed a high-severity vulnerability in the Amazon Q Developer extension for Visual Studio Code that could allow attackers to steal developers’…
Nebulock Raises $25 Million for AI-Native Contextual Security
Cybersecurity startup Nebulock has announced raising $25 million in a Series A funding round that brings the total raised by the company to over $33…
First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild
Threat actors have successfully exploited a vulnerability in PTC Windchill in the wild, marking the first confirmed real-world abuse of the popular product lifecycle management…
GitLab Patches Code Execution, Information Disclosure Vulnerabilities
GitLab has rolled out Community Edition (CE) and Enterprise Edition (EE) security updates that resolve 13 vulnerabilities, including three high-severity bugs. The most severe is…
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
A vulnerability that can facilitate attacks on operational technology (OT) systems is being exploited in the wild, according to the cybersecurity agency CISA. The vulnerability…