Kubernetes Cluster Takeover via Argo CD Repo-Server
A critical unpatched flaw in Argo CD's repo-server component can grant attackers cluster-wide control. Learn the attack surface and protective measures for your infrastructure.
Read article →
AI Agents and Data Exfiltration: The MCP Tool Description Risk
Microsoft research reveals how malicious tool descriptions can trick AI agents into leaking sensitive data. Learn the attack vector and what teams should watch for.
Read article →
Browser Extensions as Surveillance Infrastructure: What Operators Should Know
A fake Perplexity extension intercepted search queries and address bar input before encrypting them. Learn why extensions are a blind spot in security architecture and what operators should monitor.
Read article →
DNS Filtering, Authority, and the Limits of Voluntary Blocking
DNS4EU's decision to reject BREIN's blocklist reveals the legal and technical tensions in voluntary DNS-level content filtering.
Read article →
Credential Theft via SMS: How Phishing Bypasses Message Apps
A sustained campaign used SMS impersonation to steal messaging credentials from government and military targets. Learn how the attack worked and what organisations should monitor.
Read article →
Signal Backup Keys: Why Threat Actors Target Them and How
Russian intelligence operators have shifted tactics to target Signal backup recovery keys. We examine why these keys are valuable to attackers and what message encryption really protects.
Read article →
