Why this fully agentic ransomware attack is giving researchers nightmares

JadePuffer could be the first reported case of a ransomware attack driven by AI from start to finish. How can businesses ...
CSO Online

Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...
Infosecurity Magazine

Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities ...
Hosted on MSN

Veeam urges users to patch security issues which could allow backup hacks

Veeam released a patch for a 9.9/10 severity flaw that can lead to RCE It was found in Veeam Backup & Restoration The bug only works on installations joined to a domain Veeam released a patch for a ...

BeyondTrust warns of critical flaws in remote access software

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access ...

CISA: Microsoft SharePoint RCE flaw now actively exploited

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution ...
SecurityWeek

Critical Cursor AI IDE Flaws Could Lead to OS-Level Remote Code Execution

The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.