Manus Flagged the Malicious Email—After It Had Run the Code
A connected inbox became a route to code execution. The controlled test raises a harder question about when an assistant’s safeguards actually intervene.
Tag vulnerability
Unpatched Vulnerability in Magento and Adobe Commerce Exploited for Backdoor Attacks
A newly discovered unpatched vulnerability in Magento Open Source and Adobe Commerce is being actively exploited, allowing attackers to execute malicious code on online stores without authentication.
PostgreSQL Addresses Long-Standing Logical Decoding Vulnerability
PostgreSQL has released critical updates to rectify a significant security flaw that has existed since 2014, allowing unauthorized code execution through logical decoding.
Exploitation Attempts Surge Against WordPress Plugin Vulnerabilities
Recent findings reveal over 440,000 exploit attempts targeting critical vulnerabilities in WordPress plugins Super Forms and Elementor Pro.
New Zero-Day Vulnerability Discovered in CrowdStrike Falcon
A security researcher known as Nightmare Eclipse has released a proof-of-concept exploit for a zero-day vulnerability affecting CrowdStrike's Falcon endpoint security platform, raising concerns about its implications.
Claude Code Vulnerability Exposed by Prompt Injection Technique
A recent demonstration reveals that Anthropic's Claude Code can be manipulated into executing malicious code through a prompt-injection attack, raising concerns about the security of AI coding agents.
Exploitation of MLflow SSRF Vulnerability Leads to Cloud Credential Theft
Recent reports indicate that attackers are actively exploiting a critical SSRF vulnerability in MLflow, an open-source AI platform, to extract sensitive cloud credentials.
Vulnerabilities in Microsoft Copilot Personal Enable Data Exfiltration
Recent findings reveal vulnerabilities in Microsoft Copilot Personal that could allow unauthorized data access through a single click.
Exploitation of SharePoint Authentication Bypass Vulnerability Confirmed
A newly disclosed vulnerability in Microsoft SharePoint, identified as CVE-2026-55040, is being actively exploited following the release of proof-of-concept code. This critical flaw allows attackers to bypass authentication and impersonate users.
Atlassian Rovo Vulnerability Exposes Jira and Confluence Data to Attackers
A recently identified vulnerability in Atlassian's Rovo assistant allows attackers to extract data from Jira and Confluence. While one exploit path has been confirmed closed, the status of another remains uncertain.
< class="ct-module-title">
Trending now
