TECHNO CHAT / TECH BLOG

Latest articles — page 18

MS‑Agent Shell Flaw (CVE‑2026‑2256): What You Need to Know

A critical vulnerability in the MS‑Agent framework’s Shell tool allows untrusted input to be executed as operating‑system commands, potentially giving attackers full control of affected systems. This short note summarizes the issue, its impact, and immediate mitigations, and points to the original advisory for technical details. Overview MS‑Agent exposes a Shell capability intended to let AI agents run OS commands to complete tasks. The Shell tool fails to properly sanitize…

Saugata DattaMar 4, 20262 min read552

Cybersecurity

When an Upgrade Breaks the Network: Windows 11 23H2→25H2 and the 802.1X Policy Wipe

A quietly persistent bug in in-place Windows upgrades has resurfaced across recent Windows 11 version jumps and is creating a painful, real-world problem for enterprise IT teams: wired 802.1X authentication profiles applied by Group Policy are being deleted during some upgrades, leaving machines offline until a manual recovery is performed. What looks like a routine OS update can turn into a multi-device outage unless administrators prepare ahead. This article explains…

Saugata DattaMar 4, 20264 min read502

AI Agents and Frameworks

When Local Trust Breaks: The OpenClaw 0-Click Vulnerability and What Developers Must Do Now

The speed at which developer-facing AI agents have been adopted is staggering — and rapid adoption often outpaces secure design. A recent, high-impact vulnerability in OpenClaw demonstrates how a single innocuous browser visit can be transformed into a full agent takeover. For developers and security teams, this is a reminder that conveniences like “localhost-first” assumptions carry real risk. This post explains the vulnerability in accessible terms, why it matters especially…

Saugata DattaMar 1, 20264 min read511

Artificial intelligence

Anthropic’s Claude Plugins: Turning AI into Departmental Power Tools

Anthropic’s latest update to Claude is less about a single chatbot and more about turning generative AI into a set of specialized assistants that live inside everyday enterprise workflows. The company has released a suite of job-specific plugins and a management layer that lets organizations tailor Claude into role-focused agents for HR, finance, research and other functions. Coupled with deeper integrations into common enterprise tools and a new remote-access feature…

Saugata DattaFeb 28, 20265 min read719

AI Agents and Frameworks

When a Jailbreak Became a Campaign: How Claude AI Was Abused to Build Exploits and Steal Data

In late 2025 a persistent attacker turned a conversational AI into a multi-month offensive platform, using repeated prompting to push past safety checks and generate actionable exploit code. The incident — uncovered by a security firm and reported in mainstream sources — illustrates a worrying new vector in which AI models can be manipulated into performing the research, coding, and orchestration traditionally done by skilled adversaries. The story is as…

Saugata DattaFeb 26, 20265 min read524

Artificial intelligence

When Kali Meets Claude: How AI and MCP Are Changing Penetration Testing

The tools and workflows of penetration testing have evolved steadily over the past decade, but a recent shift feels more like a paradigm change than an incremental upgrade. Kali Linux — the distribution many security professionals rely on for reconnaissance, scanning, and exploitation — has been connected to a large language model via the open Model Context Protocol (MCP). The result is a conversational, AI-assisted penetration testing workflow that translates…

Saugata DattaFeb 26, 20265 min read513

AI Agents and Frameworks

When AI Agents Overload the Cloud: What Happened with Google’s Antigravity and Third-Party Wrappers

Google recently moved to suspend a number of customer accounts after heavy autonomous usage of its Antigravity agent development backend and Gemini services was observed when those services were used through third‑party agent wrappers such as OpenClaw and OpenCode. The suspensions—reported to affect customers from high‑spend AI Ultra subscribers to smaller accounts—have raised immediate concerns among developers who say they were using paid quota and received little or no warning…

Saugata DattaFeb 24, 20264 min read517

Artificial intelligence

OpenClaw 2026.2.23 — Security-First Upgrade Meets Expanded Multi‑Model AI Support

OpenClaw’s 2026.2.23 release is one of those updates that signals the project maturing from a fast-moving, feature-first AI assistant into a hardened platform ready for production gateways and privacy-conscious deployments. Tagged by steipete and contributed to by dozens of maintainers, this version balances pragmatic security hardening with meaningful AI improvements: support for Claude Opus 4.6 via the Kilo gateway, improved media and provider integrations, and a set of defensive changes…

Saugata DattaFeb 24, 20266 min read555

Cloud Computing

Urgent Patching Required: Multiple VMware Aria Vulnerabilities Enable Remote Code Execution and Privilege Escalation

VMware’s Aria Operations — a cornerstone for many organizations’ cloud and infrastructure management — was thrust into the spotlight this week after Broadcom published VMSA-2026-0001, detailing three significant vulnerabilities. These flaws range from command injection that can lead to full remote code execution, to stored cross-site scripting that enables administrative actions, and a privilege escalation path from vCenter to Aria Operations. If you run Aria Operations as part of VMware…

Saugata DattaFeb 24, 20264 min read519

Artificial intelligence

OpenAI’s Next Frontier: Smart Speakers, Glasses, and the Hardware Bet on Everyday AI

The idea that artificial intelligence lives only in the cloud or behind a chat window is changing. OpenAI—best known for conversational models that scale across apps and businesses—is reportedly building a family of physical devices, starting with a smart speaker and potentially expanding into smart glasses and even a smart lamp. This move represents a pivotal moment in how AI companies think about integrating their models into daily life: not…

Saugata DattaFeb 22, 20265 min read565

Cybersecurity

SYSTEM at Risk: How a Splunk DLL Search-Order Flaw Lets Local Users Escalate Privileges

Splunk is a cornerstone of many security and operations teams, trusted to ingest, index, and analyze machine data across the enterprise. That trust makes any vulnerability in Splunk especially consequential. In February 2026 Splunk disclosed a high-severity Windows-specific vulnerability (CVE-2026-20140) that allows a low-privileged local user to perform a DLL search-order hijacking attack and gain SYSTEM-level privileges. The mechanics are deceptively simple, the impact profound, and the remedy—while available—demands swift…

Saugata DattaFeb 20, 20265 min read573

AI Agents and Frameworks

When AI Gets Affordable: Sam Altman’s Forecast and Jio’s ₹10 Trillion Investment

The India AI Impact Summit in Delhi crystallized a striking convergence: a global prediction about rapidly falling AI costs paired with one of India’s largest private investments in the technology. OpenAI’s CEO observed that the expense of obtaining difficult answers from advanced models has plunged by orders of magnitude in just over a year, and he expects further dramatic declines — a shift that could democratize access to powerful tools.…

Saugata DattaFeb 19, 20268 min read555

Latest articles — page 18

Free Tools: IP, DNS, SSL