#cli


ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Aug 14, 2026 // 00:09

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of […]

Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

Jul 21, 2026 // 00:16

Security researchers broke out of the sandboxes in four widely used AI coding agents, including Cursor, OpenAI’s Codex, Google’s Gemini CLI and Antigravity, without attacking […]

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

Jul 20, 2026 // 12:09

A solo Russian-speaking threat actor known as “bandcampro” outsourced a chunk of their operations to Google’s open-source Gemini CLI artificial intelligence (AI) and commandeered a […]

Google Gemini CLI abused as a hacking agent, malware botnet operator

Jul 15, 2026 // 23:17

A Russian-speaking threat actor known as “bandcampro” used Google’s open-source Gemini CLI AI tool as a hacking agent and to operate a small-scale botnet. The […]

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Jul 2, 2026 // 02:07

Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the […]

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Jul 1, 2026 // 14:27

Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the […]

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Jul 1, 2026 // 14:17

Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the […]

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

Apr 30, 2026 // 11:42

Google has addressed a maximum severity security flaw in Gemini CLI — the “@google/gemini-cli” npm package and the “google-github-actions/run-gemini-cli” GitHub Actions workflow — that could […]

Bitwarden CLI npm package compromised to steal developer credentials

Apr 24, 2026 // 00:37

Updated with further information from Bitwarden. The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload […]

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

Apr 23, 2026 // 16:49

Bitwarden CLI has been compromised as part of the newly discovered and ongoing Checkmarx supply chain campaign, according to new findings from Socket. “The affected […]

1 2 Next