Format
Trust & Security
Tenet Security showed how a publicly exposed error-tracking credential and an MCP integration chain into remote code execution — and Sentry declined to fix the root cause.
◆ Heath Callahan
Trust & Security
DEF CON research finds 2.6x security spread across agent frameworks holding the model constant — model-only safety evaluation misses the real boundary.
◆ Heath Callahan
Trust & Security
Microsoft's autonomous SRE service can execute runbooks and modify infrastructure. A missing-authorization vulnerability lets attackers bypass its authority boundary — and there is no customer-side patch.
◆ Heath Callahan
Trust & Security
A single poisoned document can hand an attacker an interactive shell inside your Copilot session — and they inherit your identity, your data, and your cloud access.
◆ Heath Callahan
Trust & Security
Federal agencies face an August 7 mandate to patch or disconnect Langflow instances as active exploitation of a zero-auth vulnerability chain continues.
◆ Heath Callahan
Trust & Security
Okta's acquisition of Permiso Security adds ITDR for non-human and AI agent identities — the fastest-growing blind spot in enterprise security.
◆ Heath Callahan
Trust & Security
CVE-2026-59726 (CVSS 10.0) in Ruflo exposed 233 MCP tools without authentication. The novel vector: attackers can poison the AgentDB learning store, and a software patch alone doesn't remove the planted entries.
◆ Heath Callahan
Money & Markets
The lead regulator writing the stablecoin settlement rules is joining the bank building the infrastructure those rules will govern – while the comment period is still open.
◆ Nolan Pratt
Money & Markets
With 28% of cross-chain USDT transfers already flowing through Celo, Tether's GENIUS Act-compliant stablecoin is embedding itself into the network's existing liquidity rather than building new ecosystems. This is a direct competitive move against Circle's patent fortress and the Open USD consortium – different strategies, same regulatory future.
◆ Nolan Pratt
Money & Markets
The fintech's regulatory-first approach — a rare OCC bank charter before scaling technology — positions it as the neutral plumbing in a market that Stripe and Mastercard are spending billions to own.
◆ Nolan Pratt
