‘GitLost’ vulnerability let GitHub’s AI workflows leak private repositories

GitHub Inc.’s new Agentic Workflows feature that allowed an unauthenticated attacker to siphon data from private code ...
SecurityWeek

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

Hackers are exploiting a critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.
CSO Online

New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild

Citrix NetScaler received patches for another memory leak vulnerability similar to CitrixBleed, as well as memory overflow, file read and denial-of-service issues ...
Cybernews

Hacker says Claude AI helped to get VIP tickets to America’s most wanted festivals for free

Claude AI helped a security researcher uncover a flaw in Front Gate Tickets that could have allowed unlimited VIP tickets for ...
latesthackingnews.com

Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox

Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor's command sandbox with no ...

Claude helped uncover a ticketing flaw able to unlock free VIP festival passes

Claude helped expose a critical flaw in a major festival ticketing platform that could've unlocked VIP passes and admin access.

Researcher used Claude to get free backstage passes to every major US music festival

Security researcher Ian Carroll has disclosed a significant vulnerability in Front Gate Tickets. This Live Nation subsidiary ...

Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every ...