Amazon Web Services has just announced the acquisition of DuckLabs, the team behind DuckDB—the open-source in-process OLAP database that has established itself in just a few years as the go-to analytical tool in the data ecosystem. This acquisition raises questions about the future of the project's open-source model.
Aug 27, 2026 7 2
Intel has just unveiled the Xeon 7 Diamond Rapids, its new generation of server processors that scales up to 256 cores. The Register has published a complete deep dive. Sora breaks down the specs, performance, and what this behemoth means for data centers—and for AMD EPYC, which dominates this segment.
Aug 27, 2026 4 2
A critical RCE flaw in VMware vCenter Syslog Server is being exploited in an active campaign. Attackers are deploying reverse SSH to maintain persistent access to hypervisors. The string of virtualization vulnerabilities continues.
Aug 14, 2026 9 3
The official Microsoft MCP server for Azure DevOps does not sanitize pull request descriptions before passing them to an LLM. As a result, a hidden instruction in a PR comment can redirect the AI review agent to projects the attacker does not control and silently exfiltrate their content.
Aug 13, 2026 7 2
Three days after the launch of the program with four original Xbox titles, dataminers found a functional implementation of Xbox 360 emulation in the xefu binary. The catalog is announced to be much more extensive than announced.
Jul 25, 2026 3 1
A simple comment hidden in an Azure DevOps pull request can turn the code reviewer's AI agent against them - and send it siphoning projects that the attacker normally wouldn't have access to. The vulnerability lies in Microsoft's official MCP server.
Jul 22, 2026 8 2
Hugging Face confirms and details the previously announced breach: an internal autonomous AI agent, with overly broad permissions, served as a vector for exposing datasets and credentials. The "AI agents as attack surface" folder gains a textbook case.
Jul 21, 2026 8 2
Hijacking the agenda as a clandestine mailbox: HollowGraph uses Microsoft 365 events - backdated by twenty-four years - to exfiltrate files and receive its orders without raising any alerts.
Jul 20, 2026 8 2
The reference hub of the AI ecosystem officially acknowledges that an intrusion on its production infrastructure was carried out using an autonomous AI agent system - a new chapter in a threat seen emerging in the field.
Jul 20, 2026 16 4
On July 20, 2026, Hugging Face revealed a breach in its production infrastructure. The entry was made through a malicious dataset, but the most disturbing aspect is elsewhere: the post-intrusion operations were carried out by an "autonomous agent framework" executing thousands of actions across a swarm of ephemeral sandboxes.
Jul 20, 2026 23 3
A 11 GB dump containing the data of over 23 million Paidwork users was put up for sale on a hacking forum and then added to Have I Been Pwned on July 19, 2026. Bank accounts, addresses, dates of birth, and bcrypt: the inventory is heavy. Paidwork has yet to react publicly.
Jul 20, 2026 20 4
A contributor extracted Stack Overflow's public stats and produced a chart. The results speak for themselves: ChatGPT has taken over.
Jul 18, 2026 7 2
