#other

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Sep 3, 2026 // 00:22

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository’s own Git configuration names a command that the […]

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in Tests

Aug 26, 2026 // 13:30

Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the OpenClaw agent […]

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

Jul 16, 2026 // 12:37

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people’s Shark vacuums across the […]

Claude for Chrome Flaw Lets Other Extensions Trigger Gmail, Docs, and Calendar Tasks

Jul 14, 2026 // 20:37

Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks that read your Gmail, open your latest […]

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

Apr 15, 2026 // 11:50

Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild. Of these 169 […]

Weekly security roundup: Hybrid botnet, old Apache flaw, plus 18 other critical vulnerabilities discovered.

Apr 9, 2026 // 18:30

Thursday. Here we go again, another week filled with issues that ideally would have been discovered earlier. This one’s diverse â old security weaknesses being […]

FortiGate Ransomware, Citrix Hacking, MCP Abuse, LiveChat Phishing, and Other Threats.

Mar 19, 2026 // 17:33

ThreatsDay Bulletin is back on The Hacker News, and this week has a familiar unsettling feeling. It’s not overwhelming or catastrophic, but rather a collection […]