This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either.

CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled ...

Managed Authorisation extension to stable status, adding a centralised way for organisations to control access to MCP servers ...

Attackers used Azure CLI and ROPC to expose Microsoft 365 MFA gaps, showing why admins need tighter Conditional Access and ...

Kaspersky has outlined a sophisticated phishing method it has seen used in the wild in recent months. It shared tips on how ...

Cloudflare and AWS both implemented x402 stablecoin micropayments at their edge networks within two weeks. The open protocol ...