Bug in Cursor Allows Simple RCE
This exploit occurs entirely in the background, requiring no user approval, dialogue prompts, or interaction.
All topics
Vulnerability
45 Posts
Researchers Find New GhostApproval Bug in Many AI Coding Assistants
The bug is a modern twist on a Clinton-era piece of known Unix badness: following symbolic links.
Check Point VPN Flaw Targeted by Ransomware Actors
The vulnerability is a critical one and Check Point Research said that it’s likely that the actor targeting the bug is a financially motivated group.
The Past is Always Present in Vulnerability Disclosure
Microsoft's reaction to the Nightmare-Eclipse saga is raising memories of the worst days of the disclosure debate.
What the Data Tells Us About Claude Mythos and Bug Exploitability | Jay Jacobs and Michael Roytman
Finding a huge pile of bugs with Claude Mythos is great, but the logical next step is figuring out how many of those vulnerabilities are likely to be exploited in the near future. Jay Jacobs and Michael Roytman of Empirical Security join Dennis to talk about how the Exploit Prediction Scoring System can help teams […]
The Canvas Attack, Ivanti and Palo Alto Exploits, and Dirty Frag
If we needed any more evidence that the internet was a mistake, this week provided it. We kick things off with a discussion of the Canvas breach that has affected thousands of schools worldwide, then we dig into the disclosure of two new vulnerabilities in Ivanti and Palo Alto Networks products that are actively exploited, […]