Critical Cursor Flaws Enable Zero-Click Sandbox Escape via Prompt Injection
Two critical vulnerabilities in Cursor, an AI-powered code editor, allow prompt injection attacks to escape the editor's safety sandbox and execute arbitrary…
Tag: vulnerability research
watchTowr: Exposure Management and Vulnerability Research
watchTowr is a preemptive exposure management firm that identified active exploitation of CVE-2026-19478 in its honeypot network. The company emphasizes the accelerating…
Zero Day Initiative: Patch Tuesday Analysis
The Zero Day Initiative counted 398 CVEs in Microsoft's August 2026 release, with 62 rated Critical, and described the DNS Server flaw…
OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
OpenAI has released three versions of GPT-5.6—Sol, Terra, and Luna—as a limited preview to a small number of companies in coordination with…
Wiz Research
Wiz Research discovered and reported the Amazon Q Developer flaw, demonstrating the attack vector and coordinating with Amazon for the fix.
TrendAI: Security Research Firm Credited for Reporting CVE-2026-35273
TrendAI's Zero Day Initiative and research team reported the Oracle PeopleSoft vulnerability to Oracle.
U.S. Orders Anthropic to Suspend Claude Fable 5 and Mythos 5 Access for Foreign Nationals Over National Security Concerns
The U.S. government has ordered Anthropic to suspend access to its most advanced AI models, Claude Fable 5 and Mythos 5, for…
Endor Labs Discovers Critical isolated-vm Sandbox Escape
Endor Labs, a cybersecurity company, identified a critical vulnerability in the isolated-vm Node.js library. The flaw, GHSA-864f-rcv7-6rh4, allows sandboxed code to escape…
CyStack Researcher Discovers Critical NGINX Flaws
CyStack's Trung Nguyen discovered and reported two critical vulnerabilities in NGINX Open Source, leading to patches from F5.
Zafran Security Discovers DifyTap Vulnerabilities
Zafran Security is a cybersecurity company that discovered and disclosed the DifyTap vulnerabilities in Dify, including critical flaws enabling cross-tenant data exfiltration.…