CORTEXThe Other Side of the MCP Threat Conversation
MCP servers can leak enterprise secrets through plaintext config files or prompt injection. Learn the main risks and how to secure them.
MCP servers can leak enterprise secrets through plaintext config files or prompt injection. Learn the main risks and how to secure them.
Evooo1Bot is a Mirai-based Linux botnet that hijacks routers and IoT devices for DDoS attacks, credential theft and criminal proxy services.
Attackers are buying expired domains to exploit their reputation, traffic and DNS history, using them for malware delivery, scams and C2 infrastructure.
HoneyMyte upgraded CoolClient with a signed kernel driver that hides processes, files and network activity, making detection hard.
Acronis found PATCHCORD, a stealthy backdoor targeting Afghan telecom and South Asian infrastructure via fake VPN tools and Google Sheets C2
A litigant hid AI prompt injections in a court filing to influence a ruling. The judge caught it and banned him from electronic filing.
SafePal says an order-tracking flaw exposed personal and shipping data for 39,798 customers, but not wallet credentials or financial data.
A recent report claims ransomware attacks on K-12 are down for the first half of 2026, while another news story’s headline today claims schools are becoming a new cybersecurity battleground. New? We don’t think it’s new. But the education sector has long been characterized as providing low-hangin...
Hackers are exploiting a patched macOS Screen Sharing bug to gain root access and install Monero cryptominers.
The alliance embeds frontier models and OpenAI-trained forward-deployed engineers into IBM consulting services in a joint effort to accelerate AI-centric transformation.
France’s tax authority says a data breach exposed tax and business information belonging to 678,000 people and professionals.
Police in Germany and Brazil dismantled a €30 million bank fraud ring, arresting four in Brazil and three more in Spain and Bulgaria.
Group-IB discovered WindRelay, a new Android malware built to capture live payment card data over NFC and relay it to attackers in real time.