An unpatched vulnerability in Cursor on Windows can be triggered for code execution when a developer opens a repository in the application, Mindgard reports. Cursor is one of the most popular AI-assisted development environments, with more than 7 million active… Read More "Unpatched Cursor Vulnerability Exposes Users to Code Execution"
Ravie LakshmananJul 15, 2026Vulnerability / Browser Security Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published. The vulnerabilities are listed below – CVE-2026-15718, an invalid pointer in the… Read More "Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws"
Bitdefender demonstrated how attackers can progressively weaponize this capability. The first technique, File-Binding, redirects trusted DLL or file paths to attacker-controlled replacements. The researchers showed PowerShell loading what appeared to be a legitimate amsi.dll, but the Bind Link instead served… Read More "New Windows Bind Link techniques let attackers evade EDR, security controls"
Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience. 26 Jun 2026 • , 5 min. read SMB cybersecurity isn’t always given the attention it deserves, including by small businesses… Read More "the road to resilience starts here"
Identity-based attacks and abuse of compromised credentials have become the most common method cybercriminals use to hit networks with ransomware, analysis of real-world incidents has revealed. According to a new report by Sophos, 79% of ransomware attacks can be traced… Read More "Compromised Logins Surge as the Most Common Entry Point for Ransomware"
Security researchers at Bitdefender have demonstrated three attack techniques in which Windows’ bind links can be used to evade endpoint detection and response (EDR) products. Bind links are a legitimate Windows feature implemented by bindflt.sys and used by Store apps,… Read More "Windows Bind Link Attacks Can Hide Malware From EDR Tools"
Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute. Whatever that binary does, it… Read More "Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution"
Synthetic clicks trick trusted AI The first vulnerability stems from how Claude for Chrome handles user interaction before executing privileged actions. According to Manifold, the extension’s click handler does not verify whether an approval click originated from a real user… Read More "New bugs in Claude for Chrome allow extensions to abuse AI privileges"
ESET researchers identified 11 old and forgotten UEFI shim bootloaders at versions 0.9 and below that can be used to bypass UEFI Secure Boot on any UEFI-based machine that trusts Microsoft’s Microsoft Corporation UEFI CA 2011 third-party UEFI certificate authority… Read More "Forgotten UEFI shims undermining Secure Boot"
Most malicious open source packages have moved beyond misspelling popular project names, instead disguising themselves as plausible plugins, configs and helpers that fit naturally into a developer’s workflow. That is the central finding of new analysis by Sonatype, which examined… Read More "Attackers Move Past Typosquatting to Realistic Package Impersonation"
