All posts by John Doe

■■■■□ Proximity: Open-source MCP security scanner. Proximity is a new open-source tool that scans Model Context Protocol (MCP) servers. It identifies the prompts, tools, and resources that a server makes available, and it can evaluate how those elements might introduce security risks. The tool also work with NOVA, a rule engine that checks for issues…

■■■■□ New Phishing Attack Using Invisible Characters Hidden in Subject Line Using MIME Encoding. New Phishing Attack Using Invisible Characters Hidden in Subject Line Using MIME Encoding

■■■□□ CEO of spyware maker Memento Labs confirms one of its government customers was caught using its malware. CEO of spyware maker Memento Labs confirms one of its government customers was caught using its malware

■■■■□ Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks. Google researchers believe exploitation may have started as early as July 10 and the campaign hit dozens of organizations. https://www.securityweek.com/sophisticated-malware-deployed-in-oracle-ebs-zero-day-attacks/

🔺📱PoC Exploit Released For Nothing Phone Code Execution Vulnerability. 4️⃣https://github.com/R0rt1z2/fenrir PoC Exploit Released For Nothing Phone Code Execution Vulnerability

■■■□□ Critical GitHub Copilot Vulnerability Let Attackers Exfiltrate Source Code From Private Repos. Critical GitHub Copilot Vulnerability Let Attackers Exfiltrate Source Code From Private Repos

■■■■□ Disinformation: Israeli network “12 Tribes”: How billionaire-funded “digital militias” and Israel’s global information war are financed. A leak of Israeli documents revealed a billionaire-backed influence network codenamed “12 Tribes,” showing how former intelligence officers, American tech magnates, and government ministries coordinated a global campaign to manipulate public opinion, suppress pro-Palestinian activism, and train artificial…

■■■■■ ZDI Drops 13 Unpatched Ivanti Zero-Days Enabling Remote Code Execution. ZDI Drops 13 Unpatched Ivanti Zero-Days Enabling Remote Code Execution

■■■■□ Hackers Exploit Zimbra Vulnerability as Zero-Day with Weaponized iCalendar Files. Hackers Exploit Zimbra Vulnerability as 0-Day with Weaponized iCalendar Files

■■■■□ Introducing AgentKit New tools for building, deploying, and optimizing agents. https://openai.com/index/introducing-agentkit/