Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

jfrog

CVE-2025-6515 Prompt Hijacking Attack - How Session Hijacking Affects MCP Ecosystems

Oct 21, 2025 By Ori Hollander In JFrog
JFrog Security Research recently discovered and disclosed multiple CVEs in oatpp-mcp – the Oat++ framework’s implementation of Anthropic’s Model Context Protocol (MCP) standard. Among these, CVE-2025-6515 stood out due to its potential threat of hijacking MCP session IDs. Within the context of MCP we’ve dubbed this new attack technique “Prompt Hijacking“. Your browser does not support the video tag.
Read Post
Trustwave

Two Tools, One Strategy: Pairing Vulnerability Scanning and Pen Testing for Maximum Protection

Oct 20, 2025 By Mary Eduel Neyra In Trustwave
Penetration Testing and Managed Vulnerability Scanning (MVS) are often mentioned in the same breath, yet their true value emerges when they are combined. Each plays a distinct role in building a strong Offensive Security program, and together they form a powerful foundation for reducing risk and improving resilience. However, it is common for those not fully immersed in cybersecurity practices to either confuse or conflate these two practices.
Read Post
Corelight

Are you blind to the next big firewall exploit? Warning signs and lessons learned from the recent Cisco exploit

Oct 20, 2025 By David Burkett In Corelight
It feels like the security world is caught in a recurring cycle. We see a spike in strange scanning activity, file it away as internet background noise, and then weeks later, a major zero-day exploit drops, targeting the very technology that was being scanned. The recent Cisco ASA vulnerabilities were a textbook example of this pattern. A September 4, 2025, report from GreyNoise highlighted a massive surge in scanning, with over 25,000 unique IPs probing Cisco ASA devices.
Read Post
10 Common Vulnerabilities Found During Software Audits - and How to Fix Them

10 Common Vulnerabilities Found During Software Audits - and How to Fix Them

Oct 20, 2025 By SecuritySenses In SecuritySenses
A software audit is not a checklist but a thorough examination into the internal workings of your system that lurking vulnerabilities are usually hiding. Thousands of breaches every year are due to organizations not paying early attention to software audit vulnerabilities that might have been noticed and eliminated at an early stage. This article exposes the top ten vulnerabilities that are oftentimes encountered during software audits, why they occur, and offers some remediation measures that can be taken.
Read Post
outpost 24

Salesforce breach escalates: Qantas & Vietnam Airlines data leaked on dark web

Oct 17, 2025 By KrakenLabs In Outpost 24
The recent developments surrounding the Salesforce data breach serve as a stark reminder of the persistent threats organizations face. What began as a concerning incident earlier this summer has now escalated dramatically, with threat actors following through on their threats and releasing a substantial trove of Qantas customer data to the public.
Read Post
outpost 24

How cyber risk quantification transforms security decision-making

Oct 17, 2025 By Marcus White In Outpost 24
Security teams drowning in alerts, executives demanding business justification for security investments, and an attack surface that grows daily – sound familiar? While traditional vulnerability scanners excel at finding problems, they fall short when it comes to the critical question: which risks actually matter to your business? This is where cyber risk quantification and cyber risk scoring come in, transforming how organizations understand and respond to threats.
Read Post
CrowdStrike

Falcon Defends Against Git Vulnerability CVE-2025-48384

Oct 16, 2025 By Ash Leslie - Doug Brown - Mitch Datka In CrowdStrike
CrowdStrike has identified active exploitation of Git vulnerability CVE-2025-48384. In the observed activity, threat actors combined sophisticated social engineering tactics with malicious Git repository cloning operations. This targeted attack chain poses a substantial risk to organizations running unpatched Git installations.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.