October 14, 2026

Windows ignores the trailing dot, so writing .mcp.json. actually targets the protected file .mcp.json.

The researcher showed an exploitation by a third party via an indirect prompt injection.

The flaw CVE-2026-103572 is in Microsoft.VisualStudio.Copilot.Core.dll and also affects Visual Studio 2022.

Rated Important with a CVSS score of 8.8, the flaw was fixed on October 13, 2026 without a bounty paid.

The number of stores affected is estimated at around 700 by Finance Minister Roland Lescure.

Continuous defrost cycles and setpoints going up to 50°C were reported.

The Danfoss AK-SM and AK-SC controllers appear in the CERT-FR alert, along with Copeland and Dixell XWeb equipment.

The initial access path remains unconfirmed.

Each penetration test is limited to the change deployed since the last validated gate.

Promotion to production can be blocked when a result reaches the chosen severity threshold.

A successful run, even in report-only mode, advances the reference and those commits are not retested.

The fail-on-infrastructure-error parameter is false by default, which lets the pipeline through on error.

This large-scale nation-state campaign relies on AI with ARTEX.

The compromise allows abuse of application credentials in Microsoft 365 environments.

The excerpt carries the date of October 21 and indicates 14 minutes of reading.

Scams represent more than half of the crimes reported in Singapore.

The lightweight Gemma model was fine-tuned on local scam conversations.

A first lightweight classifier filters messages, then the Gemma model analyzes a larger part of the conversation.

The training data excluded personal information and came from anonymized scam reports.

Requests breaking election integrity rules appear in about 0.002% of conversations.

According to tests by the ISD and the McCain Institute, Claude could miss a malicious campaign split into harmless queries.

New classifiers aim to better spot novel and multi-step abuse, including fake news sites.

A fake news site run from abroad used Claude to promote Russian, Iranian and North Korean narratives.