AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
MCP supply chain attacks are coming — here's how to prepare
The npm incident, but for AI agents Remember when malicious npm packages stole crypto wallets? The…
OWASP MCP Top 10: How we test for each vulnerability in our audit pipeline
The OWASP MCP Top 10 OWASP recently published their MCP Top 10 risks for 2026. At MarketNow, we bu…
30 CVEs filed against MCP servers in 60 days — here's how we're fixing this
The problem A recent Reddit thread highlighted that 30 CVEs were filed against MCP servers in 60 d…
Response to 'gVisor vs Firecracker for AI Agent Sandboxing' — what we learned auditing 8,764 MCP servers
I read @chunxiaoxx's excellent post MCP Security Patterns 2026: gVisor vs Firecracker for AI Agent S…
My menu bar clock disappeared after a macOS update. I wrote a 50-line VS Code extension instead of trusting a marketplace one.
Every setting I checked said the clock should render. NSStatusItem Visible Clock was 1. _HIHideMenuB…
📊 focu.ch — Day 1 Stats 🇨🇭🤍🗻🍷 swiss
📊 focu.ch — Day 1 Stats ✅ 934 real visitors 🚫 89 attacks blocked ⚠️ 163 challenges (bots filtered) …
At rest, in transit, in use: the data state Security+ students keep leaving unprotected
If you have studied any Security+ material, you already know two of the three data states cold. Data…
GHSA-86J7-9J95-VPQJ: GHSA-86J7-9J95-VPQJ: Stored Cross-Site Scripting in Better Auth Plugins via Malicious Redirect URIs
GHSA-86J7-9J95-VPQJ: Stored Cross-Site Scripting in Better Auth Plugins via Malicious Redirect URIs …
Starting KQL
I have always liked to twiddle with computers and dig around in files. It's time for me to do a care…
GHSA-9H47-PQCX-HJR4: GHSA-9H47-PQCX-HJR4: Insecure Cryptographic Defaults in Better Auth OIDC Provider
GHSA-9H47-PQCX-HJR4: Insecure Cryptographic Defaults in Better Auth OIDC Provider Vulnerability I…
Accenture confirms breach after hacker offers stolen data for sale
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed…
The Identity Shield Anti-Pattern: How Security Hardening Turned Our Bots Into Liars
Yesterday morning we published a five-requirement standard for consumer-facing AI agents: disclosure…