Two critical vulnerabilities in Cursor AI code editor could allow prompt injection attacks to escape the built in sandbox and execute commands on developers’ systems. The flaws have been patched in Cursor 3.0.
A newly disclosed unpatched vulnerability in Argo CD’s repo server could allow attackers to execute code and compromise Kubernetes clusters. Researchers urge organizations to enable network policies as no security patch is currently available.
Microsoft research warns that poisoned Model Context Protocol tool descriptions can manipulate AI agents into leaking sensitive enterprise data through trusted third party integrations.
Citrix has released security updates addressing six vulnerabilities in NetScaler ADC and NetScaler Gateway that could allow arbitrary file reads, memory overreads, and denial of service attacks.
A security researcher analyzed 3,000 ClickFix payloads and uncovered API driven malware delivery, new evasion techniques, and evolving social engineering methods targeting Windows and macOS users.
Microsoft has uncovered a malicious Chrome extension impersonating Perplexity AI that intercepted user searches, captured address bar input, and routed data through attacker controlled servers before redirecting users to legitimate search results.
A critical Oracle E Business Suite vulnerability, CVE 2026 46817, is being actively exploited in the wild, prompting security experts to urge organizations to apply available patches immediately.
Huntress has identified a large scale password spray campaign targeting Azure CLI, with more than 81 million login attempts compromising at least 78 Microsoft accounts across 64 organizations.
Apple has released security updates for iOS, macOS, iPadOS, and Safari, fixing more than 30 vulnerabilities, including WebKit flaws identified with OpenAI Codex Security and Anthropic Claude.
Threat actors are actively exploiting SimpleHelp vulnerability CVE 2026 48558 to deploy TaskWeaver and Djinn Stealer, targeting cloud credentials, AI tools, cryptocurrency wallets, and enterprise infrastructure.
