Description

Unauthenticated RCE in CircleCI MCP server, NYC permit portal IDOR fixed, passkey bypasses, EncroChat malware origin, French tax data breach.

Sources:

• Unauthenticated RCE in CircleCI MCP Server Explained
• Hacking the New York City Building Permit Portal | Michael Cummings
• Passkey Bypass: Three Attacks Demolish Phishing-Resistant… | DeafNews
• Revealed: Cyber spies used malware from GitHub to hack EncroChat cryptophone network | Computer Weekly
• France’s tax agency lost data on 678,000 people to a stolen login

📰 Read the full edition on the site

🤖 Episode produced with artificial intelligence. Synthetic voice.