Security researcher Chinmohan Nayak has detailed a WhatsApp-to-host attack chain leveraging three now-patched vulnerabilities in the OpenClaw personal AI assistant. The flaws,…
A cluster within the PolinRider campaign that drops malicious VS Code task files into GitHub users' repositories. The tasks use 'runOn: folderOpen'…
An unpatched vulnerability in the Argo CD repo-server component allows unauthenticated attackers to execute arbitrary code and potentially take over Kubernetes clusters.…
Cursor fixed a CLI vulnerability that allowed cloned repositories to execute commands before trust prompts, even with sandbox enabled.
A vulnerability in Google's Quick Share for Windows that could allow an attacker to execute arbitrary code. Part of a 10-bug chain…
A vulnerability in Google's Quick Share for Windows that could allow an attacker to execute arbitrary code. Part of a 10-bug chain…
A flaw in Amazon Q Developer could let malicious repositories run code through MCP configurations.
GitHub has announced significant security changes for npm version 12, set to release next month, aimed at mitigating software supply chain attacks.…
Cybersecurity researchers at Tenet Security have identified a new class of attack called Agentjacking, which tricks AI coding agents into executing arbitrary…