Cisco Talos documented CLOSEDQUORUM, a Windows credential stealer that asks DeepSeek, Qwen, Gemini, and Mistral what to do next and follows the majority vote—no attacker C2 server to block. The public binary is an inert template with placeholder API keys; Talos has not confirmed live victims.
DigitalOcean opened Managed Agents to everyone: Firecracker harness runtimes for Claude Code, Codex CLI, OpenCode and custom agents, plus an Action Gateway MCP endpoint over 16,000 tools with credentials kept outside the sandbox. Sessions create to first reply in a few seconds, resume in 300ms, and bill active CPU only…
JFrog found that Bifrost HTTP transport before 2.1.0 accepts an unauthenticated POST to /api/mcp/client and immediately starts the given stdio command as the gateway user when management auth is off (the default). Patch is transports/v2.1.0; rotate provider keys if the management API was exposed…
Cloudflare launched Worker Previews so each Git branch gets an isolated production like Worker with its own URL, secrets, Durable Objects, and observability. Agents can deploy with npx wrangler preview, then verify via Playwright MCP and Workers Observability MCP before merge…
Databricks made its Genie One MCP server generally available, exposing governed business data and Genie Ontology to any MCP agent through Unity Gateway. Teams can pull the same trusted answers and citations from Claude, Cursor, ChatGPT, or custom agents without per tool connectors…
Meta hotfixed its Muse macOS app after researcher Patrick Wardle showed a local zero day that redirected cloud transcription to an attacker endpoint and let Muse take photos and write files without alerts. Meta says practical risk was low because the exploit needed malware already running under the user’s account…
Spotted something we missed? Start a thread.