Ubiquiti warns of new max severity UniFi OS vulnerability

Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw ...
CSO Online

Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...
SecurityWeek

Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability

Exploit for "Bad Epoll" Linux kernel vulnerability (CVE-2026-46242) can lead to root access on desktops, servers, and Android ...
latesthackingnews.com

Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox

Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor's command sandbox with no ...

Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers

In 2025 and 2026, several independent sources have highlighted the same trend: Prompt injection remains one of the most ...
SecurityWeek

‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access

DirtyClone, tracked as CVE-2026-43503, is a Linux kernel vulnerability that allows any local user to gain root privileges.
The Next Web

Windows 11 finally finds files when you type two characters instead of three

Windows 11 can now search with two characters instead of three. Local files also rank higher than web results and Copilot suggestions. June Patch Tuesday. Microsoft’s June 2026 Patch Tuesday update ...
Ars Technica

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft ...
WATE 6 On Your Side

Woman convicted in 1995 Knoxville murder challenging constitutionality of lethal injection

KNOXVILLE, Tenn. (WATE) — The lawyers for the only woman on Tennessee’s death row have filed a motion with the Tennessee Supreme Court, arguing that the state is not equipped to carry out her ...
Bleeping Computer

Path traversal flaw in AI dev platform Langflow exploited in attacks

Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. Langflow is an ...
The Next Web

A Qilin ransomware affiliate exploited a Check Point VPN zero-day for a month before a patch existed

Check Point patched a critical VPN zero-day (CVE-2026-50751) exploited since May 7 by a Qilin ransomware affiliate targeting dozens of organisations. Check Point has disclosed and patched a critical ...
CSOonline

Threat and Vulnerability Management

Learn why Forrester estimates a 230% ROI of Atlassian Cloud Enterprise in The Total Economic Impact study - thanks to improved efficiency, accelerated decision-making, and greater scalability. The ...