MCP for agent-to-agent comms may be the riskiest protocol you’ve never heard of

The adoption of AI agents in millions of organizations is creating new opportunities for attackers to make them take malicious actions, such as exfiltrating database contents and sensitive business ...
BleepingComputer

Elementor WordPress flaw lets attackers create admin accounts

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. Threat actors can exploit the flaw by ...
BleepingComputer

WordPress Click2Shell flaw lets hackers execute PHP on the server

Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform’s Core component ...
rapid7

CVE-2026-19535: Cross-Site Request Forgery (CSRF)

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows ...
rapid7

CVE-2026-44613: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin. The default CORS configuration allowed cross-origin state-changing requests and accepted text/plain request bodies, allowing an ...
cybersecuritynews

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

A critical vulnerability in OpenAI’s ChatGPT Workspace Agents, dubbed AgentForger, that allowed a single phishing link to silently build, configure, and publish an attacker-controlled autonomous agent ...
piunikaweb

Chrome’s new “local network” permission pop-up is appearing on tons of sites — here’s why

Chrome users across Reddit and X are asking the same question: why is this random website asking to connect to devices on my local network? The prompt looks alarming at first glance. It says a site ...
Game Rant

ARC Raiders Players Want to Use the Tutorial Skin in the Rest of the Game

Mohsen Baqery is a Staff Writer at GameRant based in Turkey. He primarily covers video game news while occasionally writing guides and listicles. Mohsen began his journey in video game journalism by ...
GitHub

1Panel contains a cross-site request forgery (CSRF) vulnerability in the panel name management functionality

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack Vector: This metric reflects the context by which vulnerability ...
cyberpress

Kibana Flaws Could Allow Server-Side Request Forgery and Cross-Site Scripting Attacks

Elastic has released a critical security advisory addressing origin validation errors in Kibana that expose systems to Server-Side Request Forgery (SSRF) attacks. The vulnerability, tracked as ...
indodax

Cross-Site Scripting (XSS): Ancaman Baru Bagi Trader

Di tengah rutinitas memantau grafik harga dan menyiapkan posisi trading, satu klik kecil bisa saja membuka celah besar. Mungkin kamu sedang membaca forum, membuka tautan analisis, atau sekadar ...