Thousands of Model Context Protocol (MCP) servers have serious security flaws like file access issues, command injection, server-side request forgery (SSRF), and SQL injection. This raises big worries about the safety of AI supply chain security. A big study of 9,695 MCP servers from well-known sites like GitHub, Glama, Lobehub, …

Several Tenda firmware versions have a hidden backdoor that lets people gain admin access to the device’s web interface. An attacker can use this flaw, known as CVE-2026-11405, to skip the password check and take full control without proper login details, the CERT Coordination Center (CERT/CC) reported on Monday. “An …

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and widespread today’s threats are. Daily Security Update is a short, regular report that keeps people and organizations updated on the latest in cybersecurity. It shares timely information on new threats, …