CircleCI MCP Server Flaw Hits Maximum CVSS 10.0
Unauthenticated RCE in CircleCI MCP server, NYC permit portal IDOR fixed, passkey bypasses, EncroChat malware origin, French tax data breach.
Sources:
Unauthenticated RCE in CircleCI MCP Server Explained
Hacking the New York City Building Permit Portal | Michael Cummings
Passkey Bypass: Three Attacks Demolish Phishing-Resistant… | DeafNews
Revealed: Cyber spies used malware from GitHub to hack EncroChat cryptophone network | Computer Weekly
France’s tax agency lost data on 678,000 people to a stolen login
📰 Read the full edition on the site
🤖 Episode produced with artificial intelligence…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.