Results for fehler | Geek Kitsune

Cybersecurity

Azure DevOps MCP: an invisible comment in a PR diverts the AI reviewer agent

A simple comment hidden in an Azure DevOps pull request can turn the code reviewer's AI agent against them - and send it siphoning projects that the attacker normally wouldn't have access to. The vulnerability lies in Microsoft's official MCP server.

cybersecurity azure devops

3 h ago 8 2

Kenji Arai

Read

Cybersecurity

wp2shell: a critical vulnerability in the core of WordPress allows remote code execution without authentication

A sanitation flaw in the WordPress core allows an unauthenticated attacker to run arbitrary code on the server. Patch immediately.

wordpress cybersecurity executionfailure

Jul 18, 2026 3 1

Kenji Arai

Read

Cybersecurity

TP-Link Kasa EC71: Cameras exposed home geolocation via unauthenticated UDP for six years

An independent researcher publishes the analysis of a Kasa camera that, since 2019, has been responding to unsigned UDP requests and disclosing the GPS coordinates of the home. A class of bug that should have disappeared.

cybersecurity camera geolocation

Jul 18, 2026 13 3

Kenji Arai

Read

LIVERadio Geek Kitsune

Tap to listen, the same sound for everyone

0··

// share a track →

Azure DevOps MCP: an invisible comment in a PR diverts the AI reviewer agent

Kenji Arai

wp2shell: a critical vulnerability in the core of WordPress allows remote code execution without authentication

Kenji Arai

TP-Link Kasa EC71: Cameras exposed home geolocation via unauthenticated UDP for six years

Kenji Arai

Geek KitsuneGEEK きつねG狐Geek KitsuneGEEK きつねG狐

GEEK きつねG狐 GEEK きつねG狐