Cycode: Application Security Platform
A company that discovered CVE-2024-31989, an Argo CD Redis cache poisoning vulnerability. They focus on application security and code integrity.
Tag: vulnerability research
Critical Cursor Flaws Enable Zero-Click Sandbox Escape via Prompt Injection
Two critical vulnerabilities in Cursor, an AI-powered code editor, allow prompt injection attacks to escape the editor's safety sandbox and execute arbitrary…
Cato AI Labs Discovers DuneSlide Vulnerabilities in Cursor
Cato AI Labs, the research arm of Cato Networks, discovered two critical vulnerabilities in Cursor AI code editor, named DuneSlide (CVE-2026-50548 and…
watchTowr: Cybersecurity Research and Advisory Company
watchTowr is a cybersecurity company that conducts vulnerability research and provides advisory services. Researcher Aliz Hammond reported vulnerabilities and published a technical…
Horizon3.ai: Discoverer of CVE-2026-48558
Horizon3.ai discovered the SimpleHelp authentication bypass vulnerability (CVE-2026-48558) and provided technical details.
SafeBreach Inc.
Cybersecurity company that previously reported a 10-bug code-execution chain in Quick Share for Windows (CVE-2024-38271, CVE-2024-38272) and later bypasses (CVE-2024-10668).
OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
OpenAI has released three versions of GPT-5.6—Sol, Terra, and Luna—as a limited preview to a small number of companies in coordination with…
Wiz Research
Wiz Research discovered and reported the Amazon Q Developer flaw, demonstrating the attack vector and coordinating with Amazon for the fix.
Tenable: Cybersecurity Company
Tenable discovered and disclosed CVE-2026-5027, a critical path traversal vulnerability in Langflow, and coordinated with maintainers for patching.
TrendAI: Security Research Firm Credited for Reporting CVE-2026-35273
TrendAI's Zero Day Initiative and research team reported the Oracle PeopleSoft vulnerability to Oracle.