Ars Technica Warns of “Protocol Pivoting” Risks in MCP Workflows
The analysis describes how untrusted content can reach higher-privileged tools through agent workflows. A confirmed Bulk Export MCP flaw has already been fixed.
Tag cybersecurity
Danish CPR Register Faced Unauthorized Access to 8.8 Million Records
Danish authorities are investigating unauthorized access to the names, addresses and CPR numbers of approximately 8.8 million records. The access was allegedly obtained by abusing a private company’s authorization.
VulnCheck Reports Attempts to Exploit CVE-2026-61500 in Rejetto HFS
Security firm VulnCheck has recorded attempts to exploit a flaw in Rejetto HFS 3.x that could allow an attacker to forge an administrator session and execute code on the server.
Updated: Citrix Adds Temporary Mitigation for Actively Exploited NetScaler Vulnerability
Citrix has also published a temporary mitigation for the actively exploited CVE-2026-88779 vulnerability. Fixed versions for affected NetScaler ADC and Gateway deployments remain available.
TA419 Phishing: Group Targeted US AI Policy Experts
Proofpoint described a TA419 phishing campaign targeting US AI policy experts. The attackers used fake professional outreach and proxy-based Microsoft 365 sign-in.
Seoul Police Officer Investigated Over AI Sexual Deepfakes
An officer from Dongdaemun Police Station was detained on suspicion of possessing, producing and distributing sexual materials, including AI-manipulated videos.
Fortra Discloses Three Critical BoKS Vulnerabilities
Fortra issued eight security advisories for BoKS. Three flaws are rated critical and affect components used to manage privileged access.
Apple to Tighten Full Disk Access in macOS Over AI Agent Risks
Apple plans additional checks in macOS when granting Full Disk Access. The company says the growing autonomy of AI agents significantly increases the risks associated with this broad access to data.
GitLab Fixes Critical Vulnerability in Self-Hosted AI Gateway
GitLab has released fixes for the critical CVE-2026-90970 vulnerability in its AI Gateway service. It affects self-hosted deployments and could allow command execution after authentication.
CISA Lists Zammad Vulnerability as Actively Exploited; Chaining Could Lead to Root Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the Zammad vulnerability CVE-2026-102489 to its catalog of actively exploited vulnerabilities. Combined with a second flaw, it could allow an attacker to gain root privileges.