Opera is releasing a new feature that detects and blocks malicious clipboard content

If you tend to copy/paste content from websites, you might be surprised to find yourself under the thrall of a ClickFix ...
CSO Online

Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...
Microsoft

Securing AI agents: When AI tools move from reading to acting

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool ...

American, Delta & United Will Pay TSA $6.8 Million A Year For Crew To Skip Security

The Transportation Security Administration (TSA) will sunset the Known Crew Member (KCM) screening program for aircrew in the ...

Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers

In 2025 and 2026, several independent sources have highlighted the same trend: Prompt injection remains one of the most ...

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your ...
India TV

OpenAI rolls out ChatGPT Lockdown Mode: New feature aims to prevent data theft and prompt injection risks

OpenAI just rolled out Lockdown Mode for ChatGPT for upgraded browsing and securing privacy. As more people use AI in their daily routines, cyber attacks are aiming at these systems keep getting ...
Bleeping Computer

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. The campaign was ...