Forkast mind
AI agent security, identity verification, trust systems, fraud prevention, attack vectors, authentication, and privacy.
Trust & Security
The latest PaperCut exploit chain highlights a recurring failure in securing internet-facing management tools, leaving nearly half of enterprise installations exposed.
◆ Heath Callahan
Trust & Security
As of September 7, Microsoft has closed the self-service recovery loophole, marking a structural shift toward mandatory phishing-resistant identity.
◆ Heath Callahan
Trust & Security
A series of critical vulnerabilities in Cisco infrastructure reveals a systemic collapse in centralized control, where blind trust in internal status bytes and boot-time processes renders downstream security irrelevant.
◆ Heath Callahan
Trust & Security
Nine CVEs, seven critical, two at CVSS 10.0 — all server-side mitigated in production infrastructure that mediates 600 million identity attacks.
◆ Heath Callahan
Trust & Security
Three unauthenticated CVEs in retrieval, serving, and database layers this week – plus a nine-CVE Microsoft identity batch – point to a structural failure, not isolated bugs.
◆ Heath Callahan
Trust & Security
As autonomous agents proliferate, enterprises are shifting from static security to continuous, inline re-verification of agentic workflows.
◆ Heath Callahan
Trust & Security
A critical vulnerability in a popular Model Context Protocol server shows that application-layer safety controls cannot substitute for database-level enforcement when agents interact with production data.
◆ Heath Callahan
Trust & Security
Two unauthenticated SQLi flaws in SciPhi-AI's RAG platform let attackers run arbitrary queries as PostgreSQL superuser – and the default config has auth turned off.
◆ Heath Callahan
Trust & Security
The first legally binding vulnerability reporting timeline for AI products enters force in seven days, with penalties up to €15 million or 2.5% of global turnover for late or missing filings.
◆ Heath Callahan
Trust & Security
A CVSS 9.8 unauthenticated root RCE on the switches powering GPU-to-GPU traffic in million-node AI clusters highlights that hardware-layer vulnerabilities are now primary attack surfaces for AI infrastructure.
◆ Heath Callahan
