Cyber Security News

Exposed WordPress Backups Became a Gold Mine of AWS and Email Credentials

TIKTOUK targets exposed WordPress backups to steal cloud and email credentials, with 50,000 credentials found across 37,000 domains.
United States Army

Hackathon VI – A cyber and computer challenge outreach event for young people

The 780th Military Intelligence Brigade (Cyber) hosted the first of three cyber and computer challenge events for young ...
The Hacker News

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.
cyberpress

MCP Python SDK OAuth Flaw Lets Malicious Servers Steal Credentials and Take Over Accounts

Cycode has disclosed a high-severity OAuth vulnerability in Anthropic’s official Model Context Protocol (MCP) Python SDK that ...
Decrypt

A Clever RSA Attack Fooled a Hardware Vault—Here's What It Means for Crypto

A UC San Diego-led team forged RSA signatures without extracting its key. But Bitcoin and Ethereum sign with a different ...