#host


Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Aug 20, 2026 // 16:57

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that […]

CISA: Windows Task Host flaw now exploited by ransomware gangs

Aug 18, 2026 // 13:46

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged […]

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Aug 5, 2026 // 19:06

Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is an open-source control plane for […]

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Aug 5, 2026 // 19:05

Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is an open-source control plane for […]

Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs

Jul 21, 2026 // 16:01

An Android app that can draw over other windows and write to shared storage can slip instructions to the AI agent driving that phone, in […]

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

Jul 6, 2026 // 21:56

A use-after-free bug in Linux’s KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that […]

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Jun 19, 2026 // 19:09

Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent […]

Credit card theft campaign abuses Stripe to host stolen payment info

Jun 5, 2026 // 00:17

A new Magecart campaign is using Stripe’s API infrastructure to host the credit card-stealing payload and the data exfiltrated from checkout pages. The entire malicious […]

ChatGPT share links abused to host fake outage pages to deliver malware

May 30, 2026 // 00:17

Threat actors are abusing ChatGPT’s content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application. The […]

CISA flags Windows Task Host vulnerability as exploited in attacks

Apr 15, 2026 // 17:57

CISA warned U.S. government agencies to secure their systems against a Windows Task Host privilege escalation vulnerability that could allow attackers to gain SYSTEM privileges. […]