Artificial Intelligence (AI)

Editorial illustration of a phone lock screen with a gesture sending an SMS past the PIN, marking Google's patch for the Android Gemini lock-screen bug.

Vulnerabilities

Google Publishes Patch for Android Lock Screen Bug That Reportedly Let Gemini Send SMS Without a PIN

A mobile lock-screen bypass involving Gemini — defender verification across managed Android fleets this week.

Editorial illustration of a code editor auto-pressing play wired to a git.exe file in a folder, marking the detailed Cursor auto-execute flaw on Windows.

Vulnerabilities

Cursor "git.exe" Auto-Execute Vulnerability Detailed Across Multiple Vendor Publications

More technical detail on the Cursor IDE auto-execute finding — defender review for Cursor-using teams this week.

Editorial illustration of three patch tiles converging on an AI-platform panel, marking the Fortinet, Ivanti and ServiceNow cycle and a critical ServiceNow AI RCE.

Vulnerabilities

Fortinet, Ivanti, and ServiceNow Publish Coordinated Patch Cycle (Critical ServiceNow AI-Platform RCE)

Three vendors, one patch cycle, one critical AI-platform RCE — defender verification across the Fortinet, Ivanti, and ServiceNow product lines this week.

Editorial illustration of report papers passing through an AI lens into an eagle-marked tray, detailing the White House Gold Eagle vulnerability clearinghouse.

Policy & Government

Multi-Source Detail on White House ‘Gold Eagle’ AI Vulnerability Clearinghouse

Fresh detail on the White House Gold Eagle program — federal-adjacent organizations align this week.

Editorial illustration of report papers funneling into an eagle-marked tray, representing the White House Gold Eagle AI cyber threat clearinghouse.

Policy & Government

White House Details ‘Gold Eagle’ Clearinghouse for AI Cyber Threats

A White House policy signal on AI cyber threats — federal-adjacent organizations align this week.

Editorial illustration of a code editor's play button pressing itself, wired to a repository crate, representing Cursor IDE auto-executing poisoned repos.

Artificial Intelligence (AI)

Cursor IDE Auto-Executes Malicious Code in Poisoned Repositories, Researchers Say

An AI-IDE supply-chain finding — defender review for organizations using Cursor this week.

Editorial illustration of a browser extension reaching an arm toward an envelope and calendar, marking a Claude for Chrome flaw exposing Gmail and Calendar.

Artificial Intelligence (AI)

Researchers Disclose Unpatched Claude for Chrome Flaw Tied to Gmail, Calendar Reads

An AI-browser extension disclosure with cross-tenant data implications — defender review for Claude for Chrome deployments this week.

Editorial illustration of a card-catalog drawer with a faint duplicate card, representing the MemGhost persistent false-memory attack on AI agents.

Artificial Intelligence (AI)

Researchers Disclose “MemGhost,” a Technique That Plants Persistent False Memories in AI Agents

Another AI-agent supply-chain finding — defender posture review for organizations deploying memory-enabled agents this week.

Flat white line-art of a calendar page beside a growing stack of update tiles — Microsoft Patch Tuesday and AI-driven discovery.

Patch Management

Microsoft Warns AI-Driven Vulnerability Discovery Will Mean Busier Patch Tuesdays

Patch Tuesdays get busier as AI drives vulnerability discovery — defender-team cadence review this week.

Flat white line-art of a large shield beside a network node grid — UK Cyber Shield agentic-AI defense plan and Cyber Resilience Pledge.

Policy & Government

UK Government Launches “Cyber Shield” Agentic-AI Defense Plan and Cyber Resilience Pledge

A national-scale agentic-AI defense plan from the UK — defender teams and industry partners align this week.

Flat white line-art of a robot assistant handing over a labeled package card — researchers disclose the HalluSquatting AI coding-assistant technique.

Supply Chain Attack

Researchers Disclose "HalluSquatting" Technique Targeting AI Coding Assistants

An AI-hallucination supply-chain finding with organization-wide implications — defender review this week.

Flat white line-art of an issue card linked to a padlock guarding a stack of repository panels — the "GitLost" GitHub disclosure.

Vulnerabilities

"GitLost" Disclosure: Researchers Say GitHub Agentic Workflows Could Leak Private Repository Data

An agentic-workflow data-exposure disclosure with organization-wide DevSecOps implications — defender review this week.

See all