Snowflake Deprecates Service Account Passwords as Teams Face Credential Mapping
Snowflake is systematically eliminating single-factor password authentication for legacy service accounts across its data platform. Under the enforcement timeline, automated service accounts designated with the legacy service user type will no longer be permitted to authenticate using static passwords. Instead, data engineering and platform teams must transition automated workloads to public-key cryptography, OAuth flows, or […]
Attackers Abuse npm Mirrors and unpkg CDNs to Host Fake CAPTCHA Phishing Pages
Turning Public Package CDNs into Phishing Infrastructure A newly uncovered supply chain campaign has demonstrated how threat actors are repurposing npm package mirrors and public content delivery networks (CDNs) to host deceptive phishing pages. By publishing lightweight packages containing malicious HTML files to the npm registry, attackers exploit open CDN services like unpkg to serve […]
Azure SQL Database Provisioning in VS Code MSSQL Extension Reaches General Availability
Bridging Local Development and Cloud Databases Microsoft has announced the general availability of Azure SQL Database provisioning directly within the MSSQL extension for Visual Studio Code. This release streamlines how developers create, configure, and connect to managed cloud databases without leaving their code editor. The feature includes direct support for the Azure SQL Database free […]
Poisoned arrayref Rust Crate Shows Why Build-Time Execution Needs Guardrails
A Compromised Maintainer and Three Poisoned Crates Earlier this week, security researchers identified a coordinated supply-chain attack targeting the Rust package ecosystem. Attackers compromised the crates.io account of a maintainer responsible for arrayref, a widely used Rust library with tens of millions of downloads across cryptography, networking, and graphics packages. Once inside the account, the […]
Bridging Reverse Engineering and AI Agents: Deep Dive into the x64dbg MCP Server
Reverse engineering native binaries on Windows has traditionally been an intensely manual discipline, requiring reverse engineers to step through disassembly, inspect register states, analyze memory dumps, and reconstruct control flow graphs line by line. The release of the x64dbg-mcp-server project brings the Model Context Protocol (MCP) directly into the x64dbg debugger ecosystem. By exposing native […]
CISA Warns of In-the-Wild Exploits Targeting Critical MLflow SSRF Vulnerability
The Cybersecurity and Infrastructure Security Agency added a critical vulnerability in the open-source machine learning platform MLflow to its Known Exploited Vulnerabilities catalog after telemetry confirmed attackers are actively scanning and compromising exposed instances. The flaw, tracked as CVE-2026-64849, allows unauthenticated remote attackers to trigger server-side request forgery requests from vulnerable MLflow servers to internal […]
Protobuf Finally Has a Production-Grade LSP Server, and It Ships in the Buf CLI
Protocol Buffers just got the editor experience it always deserved. Buf has shipped a production-grade Language Server Protocol (LSP) server for Protobuf, built directly into the Buf CLI. That means go to definition, code completion, semantic syntax highlighting, and real-time diagnostics for .proto files, the kind of tooling that most languages have taken for granted […]
DeepSeek Harness: the plugin first framework for AI agents
DeepSeek’s open source agent framework, DeepSeek Harness, exploded onto GitHub this week and picked up close to 70,000 stars in a single day. The repo’s tagline is simple and a little audacious: “everything is a plugin.” That phrasing is doing a lot of work, and it’s worth unpacking what the project actually ships, because the […]
MCP Toolkit for Azure DocumentDB Now in Public Preview
AI agents get database access through Model Context Protocol Microsoft has released a public preview of the MCP toolkit for Azure DocumentDB, giving AI agents direct access to DocumentDB databases through the Model Context Protocol. The announcement came out of the Azure Update pipeline, with deeper details from the Ignite 2025 sessions where the broader […]
GitHub Copilot Modernization Now Generally Available
AI-powered legacy upgrades go GA GitHub Copilot modernization has reached general availability. The feature, initially previewed earlier this year, uses AI to help developers upgrade legacy codebases across .NET, Java, and C++ projects in Visual Studio and VS Code. Instead of manually working through migration guides, developers can describe the target framework or API to […]
Prepared Image Specification on AKS tackles the cold-start node problem
What is Prepared Image Specification? If you run AI training jobs, GPU inference, or large Windows workloads on AKS, you have probably noticed the startup lag. A new node joins the cluster, and then it spends minutes pulling container images before it can actually run anything. For autoscaling events, those minutes add up. Azure’s Prepared […]
AKS Application Routing with Gateway API hits GA, simplifies Kubernetes traffic management
What is Application Routing with Gateway API? Azure Kubernetes Service now supports the Kubernetes Gateway API natively for ingress traffic management, and it’s generally available. This isn’t just another ingress controller option. The Gateway API is a different approach to routing altogether, and the AKS implementation comes with Azure DNS and Key Vault TLS integration […]