720-891-1663

07.25.25 Security News Bites

AI is Great – But Is It Secure? MCP (Model Context Protocol) servers are the backbone of agentic AI. But researchers say that authentication is optional and nearly all of the nearly 2,000 MCP servers exposed to the Internet today do not require authentication or have access controls. What could possibly go wrong? To test […]

Continue reading → [DISPLAY_ACURAX_ICONS]

FBI Says Thousands Involved in Ransomware, Swatting

The FBI released a warning yesterday about a loosely-organized cybercriminal organization called The Com. The Com launches cyberattacks to steal money and information. The FBI released 3 security bulletins about The Com, a group made up of English-speaking minors, but which has expanded to include THOUSANDS of people who commit a variety of crimes. The crimes include ransomware, […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News Bites for July 18, 2025

DOGE Staffer Leaked Private xAI API Key This does not appear to be malicious but both careless and of questionable judgement. Marko Elez, a special government employee who recently worked on systems at Treasury, Social Security and Homeland, published code to his GitHub. The code contained a private API key that exposed dozens of models […]

Continue reading → [DISPLAY_ACURAX_ICONS]

A Billion Here (in Crypto Theft), a Billion There – After a While, it Adds Up

To quote a former senator, it does add up. this year it is adding up quickly. Blockchain analysis group Chainalysis says that hackers stole more than $2 billion in crypto in the first 6 months of 2025. $1.5 billion of that comes the hack of Bybit – by hackers connected to North Korea. That $2.17 […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Google, Amazon, Others Make Money From Scummy “Nudify” Apps

Okay, so you may want to take a shower after reading this, but it is important. Nudify apps do just that. You upload a picture of someone, say a high school girl you want to bully. Enter your (stolen) credit card. Click a few buttons and you download a deepfake nude image of the picture […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News Bites for July 11, 2025

How to Trick ChatGPT? I Give Up A clever AI bug hunter found a way to trick ChatGPT into disclosing Windows product keys, including at least one owned by Wells Fargo bank, by inviting the AI model to play a guessing game. Part of the reason the trick worked was that the sensitive data had […]

Continue reading → [DISPLAY_ACURAX_ICONS]