Asana warns MCP AI feature exposed customer data to other orgs

Published on June 18, 2025

Work management platform Asana is warning users of its new Model Context Protocol (MCP) feature that a flaw in its implementation potentially led to data exposure from their instances to other users and vice versa. [...]

Continue reading on website
Other news

CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability

June 18, 2025
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabilities (KEV) catalog, stating it has been actively exploited in the wild.The vulnerability, CVE-2023-0386 (CVSS score: 7.8), is an improper ownership bug in the Linux kernel that could be exploited to escalate privileges on susceptible

New Linux udisks flaw lets attackers get root on major Linux distros

June 18, 2025
Attackers can exploit two newly discovered local privilege escalation (LPE) vulnerabilities to gain root privileges on systems running major Linux distributions. [...]