Grafana fixes critical SSRF flaw affecting Grafana MCP servers
An MCP caller could potentially reach unintended internal services leveraging the MCP server’s network position.
SC Media
20 articles
FCC proposes consumer scorecard for telecom robocall prevention efforts
The proposed scorecard would evaluate how well voice service providers, including wireless, wireline, and VoIP companies, deter robocalls and their transpare...
Microsoft Defender for Office 365 mistakenly flags Google search links as malicious
The false positive is attributed to an inaccurate security classification within the Defender for Office 365 Safe Links feature.
Hackers compromise 5,000 Dropbox accounts using Lenovo ID flaw
The breach, which occurred between August 4 and August 21, allowed attackers to access Dropbox accounts by registering Lenovo IDs with the victims' email add...
Ping YOUniverse: How AI lets identity management go 'headless'
Agentic AI now makes it possible to develop and use the Ping Identity platform without GUIs or dashboards.
Enterprise AI is quietly undoing a decade of credential hygiene
AI adoption is reviving risky static credentials, unsigned artifacts and poor secrets management.
AI now makes SMBs worth a hacker’s time
AI has erased an economic advantage that once helped protect SMBs.
SonicWall advises customers to patch two new SMA1000 zero-days
Attackers are chaining two SonicWall SMA1000 zero-days to gain remote code execution.
Ping YOUniverse: Restoring trust in both humans and AI agents
As AI makes identity management even more critical, Ping says it is solidifying trust in people and machines alike.
CrowdStrike unveils Falcon Guardian to secure AI agents
As reported by Silicon Angle, CrowdStrike has introduced Falcon Guardian, a new software designed to identify and disable unapproved artificial intelligence ...
Critical SQL injection vulnerability in Sangoma Switchvox exploited in the wild
The vulnerability, a severe SQL injection flaw with a CVSS score of 9.3, affects Sangoma Switchvox SMB Edition 8.
METR discloses 2 security incidents, including $600,000 model credit theft
The first incident, in March 2026, saw attackers steal an API key for public model inference.
CrowdStrike launches AI models for cybersecurity with Nvidia
SafeMind comprises two primary models: Red Tempest, designed to simulate AI-driven adversaries and execute advanced attack scenarios, and Blue Solano, which ...
Mozilla rolls out ad blocking to Firefox for iOS
Due to Apple's requirement for all iOS browsers to use its WebKit engine, Mozilla had to build ad blocking directly into Firefox for iOS.
FBI warns of sophisticated phishing attacks targeting high-profile individuals
X investigates mass password reset attempts following X Money launch
Users have reported receiving numerous password reset emails, prompting X product engineer Mridul Singhai to acknowledge the issue on the platform.
BGP hijacking incident diverts traffic, targeting Softaculous and Virtualizor users
The incident began around 20:57 UTC on August 28, when an unknown network began announcing a block of IP addresses belonging to Hetzner, a Softaculous upstre...
Malicious Composer themes deliver spyware to unpatched iOS devices
The malicious code performs two main functions: a mobile ad-fraud and gambling-redirect chain, and a WebKit-to-kernel exploit chain on iPhones that installs ...
Breeze Comet threat actor targets Brazilian financial sector with sophisticated attacks
Breeze Comet gains initial access through password spraying and social engineering tactics, impersonating IT support to trick victims into installing Remote ...
Leaked documents reveal Russian military cyber recruitment pipeline
Originally reported on by DomainTools and GBHackers, the documents detail a force-generation mechanism for General Staff components, including the GRU and th...