Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۰۹:۱۵

AI coding agents are installing MCP servers that will never be patched

When a developer tells an AI coding agent to “set up a GitHub MCP,” the agent has to pick a package. New research from Glow Labs documents sessions where it picked one out of an archived repository that will never be patched again. Source: Glow Security Reviewing real AI coding session transcripts, Glow Labs found deprecated MCP servers landing on developer machines, a pattern it calls MCPhantom. In 98% of those sess…

خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۰:۰۰

What human hackers still do better than AI, according to HackerOne’s CEO

AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, what AI does to the crowd model, and why routine medium-severity findings may pay less. She also covers the growing pile of AI-assisted submissions, how programs sort useful reports from spam, and which…

آسیب‌پذیری و روز صفر تست نفوذ

منبع

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۰۹:۳۰

Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up

HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: OpenAI’s agents turned it up in late September during a high-compute red-teaming campaign. Finding bugs is getting faster. Fixing them isn’t. HTTP2Shell shows why that gap matters, and how Sweet Virtual Patching protects r…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها

منبع

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۰۹:۰۰

Fireperf: Open-source network testing tool for firewalls and routers

The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. It is free software aimed at administrators, developers and testers who evaluate firewalls, routers and other systems that keep a state for every connection. What fireperf does iperf3, the widely used bandwidth tester, measures how much data two…

متن‌باز

منبع

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۰۸:۳۰

Cybersecurity jobs available right now: November 3, 2026

Cyber Security Architect Planck Technologies | Portugal | Remote – View job details As a Cyber Security Architect, you will design security architectures for telecommunications networks, platforms, and cloud environments. You will define security frameworks, assess risks, conduct threat modeling, and evaluate security technologies. You will partner with engineering teams to embed security into deployments, maintain a…

منبع