CYBERSECURITY

Credential Harvester Attack: Rotate All Security Keys Immediately

By

→ View original post on X — @jiquanngiam, 2026-03-26 03:37 UTC

–

26 March 2026 4h37

If you were impacted, rotate ALL your credentials immediately. The credential harvester in the attack harvested everything from ssh keys, aws keys, gcp keys, azure secrets, kubectl tokens, db configs, crypto wallets, ci/cd secrets, and even shell history.

Full post on incident: no prompt injection required

By

→ View original post on X — @jiquanngiam, 2026-03-26 03:33 UTC

–

26 March 2026 4h33

Full post on the incident: futuresearch.ai/blog/no-prom…

Security Alert: Migrate Local MCP Servers to Remote Architecture

By

→ View original post on X — @jiquanngiam, 2026-03-26 03:33 UTC

–

26 March 2026 4h33

PSA: Stop running local MCP servers. The folks at futuresearch were pwned when a local MCP server pulled in an impacted package. Always run your MCP servers remotely. The blast radius should be limited to the container that it runs in. If you're impacted by the LiteLLM incident and looking for strategies to move to a remote MCP architecture for your company, @MintMCP_AI can help you. DM me.

MCP Server Security: Local Execution Risks and Remote Solutions

By

→ View original post on X — @jiquanngiam

–

26 March 2026 4h17

We've been recommending all our customers to disallow running local MCP servers. Thank you for highlighting and bringing this problem to light. Our solution makes it easy to run any (even stdio) server remotely. If you're impacted and want a longer term secure solution, please

→ View original post on X — @ninadschick

Tech Policy Threatens American Sovereignty and Economic Growth

By

@ninadschick

–

25 March 2026 23h31

I agree that it’s extremely counterproductive and directly undermines American sovereignty as regards both national security and economic growth/prosperity. But, I fear this is just the tip of the iceberg.

→ View original post on X — @christinelu

CCP Trolls Exploit Unrestricted Tweet Replies Online

By

@christinelu

–

25 March 2026 20h26

When you forget to limit the replies to your tweets and the CCP trolls show up. pic.twitter.com/mKJb0D5ObU
— 🖤 Christine (@christinelu) 25 mars 2026

When you forget to limit the replies to your tweets and the CCP trolls show up.

→ View original post on X — @sassoftware

AI-Powered Fraud Threats Outpace Organizational Response Capabilities

By

@sassoftware

–

25 March 2026 18h22

Fraudsters don’t have governance committees or budget cycles. They just act. New research by @TheACFE + SAS asks whether organizations can move fast enough to keep up with #deepfakes & other AI-charged #fraud threats. Spoiler: most can’t yet.

→ View original post on X — @swyx

Cloud CLI Auth Patterns and Command Discovery Suggestions

By

@swyx

–

25 March 2026 17h13

great list, maybe also return related commands/suggested next commands on output to nudge discovery auth is a big hole for cloud agents using clis, better design patterns there