In a newly disclosed supply-chain attack, an npm package “postmark-mcp” was weaponized to stealthily exfiltrate emails, ...

Researchers call it an evolution from earlier versions and not a leap forward, but still advise CSOs to better secure ESXi hosts.

The platform’s lifecycle management, cross-app access, and verifiable credentials aim to reduce attack surfaces and ensure compliance as AI agents gain elevated access across enterprise systems.