This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies.
Forever Security says the embedded browsers in Cursor, Copilot, Claude Desktop, VS Code and Codex could run commands, read files or spoof addresses. The Codex and VS Code flaws were still unpatched at pu
Security firm Parameter says merely opening a malicious public ChatGPT share link could have let an attacker read a victim's private conversations. OpenAI patched the flaw on October 26, and the research
AIR Research Lab says a GitHub repo posing as a Solana starter kit ranked first in search and tells AI coding agents to install a remote-access tool. The researchers show no victims, but the lure is a wa
Anthropic says an unreleased Claude research model wrote a working remote root exploit for a Linux kernel bug. The patch exists upstream, but Ubuntu users are still waiting and Red Hat only moved to Crit
A modified copy of Claude Code sat in Cursor's extension store for about 11 hours and tried to plant an SSH backdoor. Anthropic says it was not breached, but Cursor says uninstalling the fake may not rem
Google says Gemini 4 Carbon leads the Artificial Analysis index and its cybersecurity benchmarks, yet only a vetted group of cyber defenders can use it for now. Most of the proof comes from Google itself
