2 articles found
One malformed HTTP header bypasses auth on millions of MCP servers. Here’s how CVE-2026-48710 works, what data was found exposed, and what to patch immediately.
The secret isn’t in your vault, it’s in your browser’s memory. A vulnerability in Microsoft Edge exposes the harsh reality of transient state security.