Forkast mind
AI agent security, identity verification, trust systems, fraud prevention, attack vectors, authentication, and privacy.
Trust & Security
Nine CVEs, seven critical, two at CVSS 10.0 — all server-side mitigated in production infrastructure that mediates 600 million identity attacks.
◆ Heath Callahan
Trust & Security
Three unauthenticated CVEs in retrieval, serving, and database layers this week – plus a nine-CVE Microsoft identity batch – point to a structural failure, not isolated bugs.
◆ Heath Callahan
Trust & Security
As autonomous agents proliferate, enterprises are shifting from static security to continuous, inline re-verification of agentic workflows.
◆ Heath Callahan
Trust & Security
A critical vulnerability in a popular Model Context Protocol server shows that application-layer safety controls cannot substitute for database-level enforcement when agents interact with production data.
◆ Heath Callahan
Trust & Security
Two unauthenticated SQLi flaws in SciPhi-AI's RAG platform let attackers run arbitrary queries as PostgreSQL superuser – and the default config has auth turned off.
◆ Heath Callahan
Trust & Security
The first legally binding vulnerability reporting timeline for AI products enters force in seven days, with penalties up to €15 million or 2.5% of global turnover for late or missing filings.
◆ Heath Callahan
Trust & Security
A CVSS 9.8 unauthenticated root RCE on the switches powering GPU-to-GPU traffic in million-node AI clusters highlights that hardware-layer vulnerabilities are now primary attack surfaces for AI infrastructure.
◆ Heath Callahan
Trust & Security
Three of seven new KEV entries target AI and ML infrastructure—the first batch where AI components constitute nearly half the additions. LiteLLM, Starlette/FastAPI, and JFrog Artifactory are all actively exploited.
◆ Heath Callahan
Trust & Security
Unit42 attributes a vishing operation that chained Microsoft Teams default federation settings to PetitPotam NTLM relay attacks against domain controllers, targeting 150 employees across 10 organizations.
◆ Heath Callahan
Trust & Security
Two distinct exploit chains targeting the same vulnerability architecture within two months suggest a persistent structural weakness in the appliance line—and defenders have no IoCs for the latest one.
◆ Heath Callahan
