… MORE CONTEXT Critical Microsoft Excel bug weaponizes Copilot Agent for zero-click information disclosure attack AI vs AI: Agent hacked McKinsey's chatbot and gained full read-write access in just two hours China-linked snoops have been exploiting Dell 0-day since mid-2024, using 'ghost NICs' to avo… …
Security Critical Microsoft Excel bug weaponizes Copilot Agent for zero-click information disclosure attack Could steal sensitive personal and financial data After a whopper of a Patch Tuesday last month , with six Microsoft flaws exploited as zero-days, March didn't exactly roar in like a lion. …
… Today’s release does not reflect a significant increase in AI‑driven discoveries, though we did credit one vulnerability to an Anthropic researcher using Claude." As Zero Day Initiative chief vuln finder Dustin Childs noted in his monthly PT writeup, this is - by his count - Microsoft's second-larg… …
… At the time, the vulnerability was neither publicly known nor exploited, according to Microsoft, which deemed exploitation "less likely." Fast forward to Wednesday when the US Cybersecurity and Infrastructure Agency added CVE-2026-20963 to its Known Exploited Vulnerabilities KEV catalog, gave feder… …
… Or as The Reg put it , "an AI model that can generate zero-day vulnerabilities." Oh boy! Just what we needed. Not just AI security bug slop, but automated, dedicated AI security bug slop! …
… Anthropic announced its newest model on April 7, and at the time said Claude Mythos Preview has found and can develop exploits for zero-day vulnerabilities "in every major operating system and every major web browser." Because setting this type of zero-day machine loose on society at large would ca… …
… MORE CONTEXT Anthropic won't own MCP 'design flaw' putting 200K servers at risk, researchers say Agents hooked into GitHub can steal creds – but Anthropic, Google, and Microsoft haven't warned users Anthropic quietly fixed flaws in its Git MCP server that allowed for remote code execution Anthropic… …
… The latter had been exploited as a zero-day for months , and Adobe finally released a patch over the weekend. ® security patches patch management microsoft cybersecurity and infrastructure security agency cybercrime
… Attackers on this end of the spectrum – typically espionage groups and North Korean scam IT workers – do this by targeting network edge devices like firewalls, routers, and VPNs, generally by exploiting zero-day bugs. …
Security Ransomware crims abused Cisco 0-day weeks before disclosure, says Amazon security boss Interlock's post-exploit toolkit exposed Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a… …