Saint Fox

Innovate Fearlessly, Protect Relentlessly.

[Saint Fox @saintfox_com]

MCP TS SDK can send OAuth to an attacker server. PAN-OS root RCE on the management plane. Cisco SEG root via email attachment. AhsayCBS backup chain to SYSTEM. Seven AI agent and MCP CVEs in one day.

SAINT FOX

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

GitLab Duo Agent CVSS 9.9. CISA links Integrity Tech to edge raids. Atlassian file read hours after PoC. SonicWall SMA1000 pre-auth SSRF is 10. Azure SRE Agent privilege escalation.

SAINT FOX

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

Agentic AI roots Zammad in seconds. MCP Python SDK leaks OAuth secrets. Apple CoreGraphics under targeted attack. Citrix NetScaler zero-days hit defaults. FortiMail path traversal on KEV.

SAINT FOX

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

Check Point VPN RCE under active attack. Public MCP configs leak credentials. 147 MCP servers open with no login. WSO2 CVSS 10 on KEV. TeamCity flaw now used in ransomware.

SAINT FOX

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

AI coding agents hijacked via plugins. GitLab leaks any file without login. Cisco mail gateway rooted by one email. ScreenConnect runs files mid-session. MCP still trusts tool text too much.

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

This week: Deadbugz poisons MCP after trust, Cisco FMC CVSS 10 (Sandworm + ransomware), Citrix NetScaler auth bypass on KEV, MikroTik RouterOS dual KEVs, Fortinet heap overflow to PivotC2.

SAINT FOX

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

This week: LiteLLM MCP auth bypass on KEV, JFrog Artifactory phantom key (active exploit), Kestra unauth RCE, SonicWall SMA1000, Starlette Host header bypass in AI stacks.

SAINT FOX

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

PaperCut zero-day under attack. Citrix NetScaler root RCE. Gitea code injection. ownCloud KEV. Avada zero-click RCE. Top 5 by SAINT FOX.

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

MLflow SSRF leaks cloud credentials. Windows IKE RCE. AI scripts on Siemens PLCs. vCenter and Zimbra next. Top 5 by SAINT FOX.

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

What Actually Mattered at Black Hat USA 2026.

Beyond the product launches and headlines, here are the signals every security leader should be paying attention to.

#BlackHatUSA #SaintFox #AIsecurity #CyberSecurity

[Saint Fox @saintfox_com]

Cisco FMC zero-day exploited. VMware emergency patches. DeepSeek attacks on autopilot. This week's Top 5 ranked by Saint Fox.

#CyberSecurity #AISecurity #SaintFox #CyberShorts #InfoSec

[Saint Fox @saintfox_com]

We are thrilled to have partnered with CIO Association (CIO Klub), co-sponsored with Cisco, as the Title Partner for their event Security Saga 2024!

"Innovate Fearlessly, Protect Relentlessly."

#StFox #Cybersecurity #DigitalTransformation #CiscoCollab

[Saint Fox @saintfox_com]

How would you distribute the $1.3b set aside for AI by GOI?
Here is our take.

https://t.co/Ab6Fql5ZND