Headless 360: Salesforce's latest pitch to let AI do the dev work

The goal of Headless 360 is that everything on the Salesforce platform is now an API (application programming interface), MCP ...
Microsoft

Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

Threat actors are abusing external Microsoft Teams collaboration to impersonate IT helpdesk staff and convince users to grant ...

Microsoft finally fixes a security limitation in Office for the web

Microsoft adds sensitivity label creation with custom permissions to Word, Excel, and PowerPoint on the web, closing a key ...
SecurityWeek

Exploited Vulnerability Exposes Nginx Servers to Hacking

A critical Nginx UI vulnerability that allows attackers to take full control of servers has been exploited in the wild.
CSO Online

Critical nginx UI tool vulnerability opens web servers to full compromise

The vulnerability, with a CVSS score of 9.8, relates to the software’s support for Model Context Protocol (MCP) servers, ...
Visual Studio Magazine

At VSLive!, Mads Kristensen Lets 'the Cat out of the Bag' on Visual Studio 2027

At VSLive! Las Vegas, Mads Kristensen revealed Visual Studio 2027 as part of a broader shift toward AI-assisted development and a more continuous release cadence for Microsoft's flagship IDE.

Critical Nginx UI auth bypass flaw now actively exploited in the wild

A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full ...