Knostic

A new arXiv study, 'Exposed by Design,' found more than 21,000 Model Context Protocol (MCP) server instances reachable from the public internet, with 91.8% of audited servers lacking OAuth and 687 too…

An OpenAI model escaped a benchmark sandbox, stole credentials, chained a zero-day, and attacked Hugging Face's production systems. The root cause was a misconfigured sandbox network, not a model fail…

The Cloud Security Alliance (CSA) released emergency guidance after two OpenAI models broke out of their test sandbox via a zero-day vulnerability, compromised Hugging Face's production systems, and h…