LIVE · cybersecurity feed
Live wire
Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITIONWebmail CSS Attacks Expose a New Risk for AI-Powered Email ToolsMetabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive DataCritical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise DataCVE-2026-8037 · CISA Adds Progress LoadMaster Command Injection Flaw to KEV CatalogSensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It AllAtlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to AttackersNew CSS Attacks Can Break Webmail Defenses to Steal Passwords and TokensCVE-2023-38646 · Metabase Zero-Day Exploited in Wild Allows Admin Access Without AuthenticationCVE-2026-18577 · N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist
ai

Give any website a WebMCP interface

Today we're launching a developer preview of WebMCP on Cloudflare. With one switch, any site becomes usable by browser AI agents — no new APIs, no origin changes — while the human stays in control and creators keep their traffic.

zeroday.news ·

Cloudflare has introduced WebMCP, a new feature designed to provide a "Web Management Control Program" interface for any website. This development aims to enhance the management and control capabilities available to website operators, regardless of their site's underlying infrastructure.

WebMCP is intended to offer a standardized way to interact with and manage web properties, abstracting away complexities often associated with diverse hosting environments and content management systems. The initiative aligns with Cloudflare's broader strategy to provide comprehensive tools that improve web performance, security, and developer experience.

The introduction of WebMCP builds on Cloudflare's extensive suite of services, which includes content delivery networks (CDNs), DDoS protection, and various security and optimization features. By offering a unified control plane, Cloudflare seeks to simplify operations for developers and administrators, enabling more efficient management of their online assets.

This new interface is expected to integrate with existing Cloudflare offerings, potentially leveraging technologies such as Cloudflare Workers, which allow for serverless execution of code at the edge. Such integration could empower users to implement custom logic and automations directly through the WebMCP interface, further extending its utility.

While specific technical details regarding the implementation and compatibility of WebMCP are still emerging, the concept suggests a move towards a more programmable and controllable web environment. This could benefit a wide range of users, from small personal websites to large enterprise applications, by providing a consistent management experience across different platforms.

aicloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerability

Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Mapping the malware blast radius a single alert won’t show you In this interview with Help Net Security, Mike Wiacek, founder and CTO of Stairwell, explains Backstory, an AI agent that takes a single alert and works outward to map how far a malware campaign spread. He walks through the research behind

phishing

U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data

Defense manufacturer IEH Corporation has disclosed a phishing attack that compromised an employee's Microsoft 365 inbox. The breach, discovered on August 4, potentially exposed sensitive export-controlled military data, customer information, and engineering documents. While no data exfiltration has been confirmed, the incident highlights the risks associated with sophisticated social engineering tactics targeting critical infrastructure suppliers.

malware

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 109

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Fake Xeno Roblox Cheats Deliver Powerful Java Stealer Through Discord and Forums DarkSword’s Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator Cluster Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting

zero-dayhigh

Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Palo Alto Networks Faces China Cybersecurity Review Amid Rising Tech Tensions Metabase Zero-Day Exploited in the Wild, […]

ransomware

Ransomware gangs skip the CEO, head straight for the 40-something IT manager

Gen Xers who feel triggered by this should remember to unplug the network cable and call the cops

css attackshigh

Webmail CSS Attacks Expose a New Risk for AI-Powered Email Tools

Researchers have discovered that CSS, typically used for styling web pages, can be weaponized in webmail clients to steal user credentials, hijack sessions, and manipulate AI tools. These attacks exploit vulnerabilities in how email clients handle HTML and CSS, allowing malicious styling to interact with the trusted interface. The research highlights risks for major services like Outlook, Gmail, and Yahoo Mail, particularly concerning AI integrations.