First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero ...

"A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to ...

Cycode has disclosed a high-severity OAuth vulnerability in Anthropic’s official Model Context Protocol (MCP) Python SDK that ...

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.

ControlTheory CTO Eric Anderson describes a production chat failure investigated with Dstl8 and passed to Claude Code. His ...

You have written the code to call an API. However, when authentication errors or timeouts occur, you don't know what to check ...

I often see the word 'API,' but I don't know what it does.Why is an API key necessary when using AI or web services from ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

Urban heat islands are a solvable data problem: this piece shows how to combine free satellite imagery, standard ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI ...

One afternoon earlier this month, I pulled up to the rec center and realized that I had a problem. It was not the three boisterous tweens in the back seat who were clamoring to be set loose in the ...