AI Coding Assistant

Cursor Zero-Day Vulnerability Remains Unpatched After Seven Months Cursor zero day vulnerability exploitation diagram, AI coding assistant security threat analysis

Cursor zero day vulnerability exploitation diagram, AI coding assistant security threat analysis

Cursor Zero-Day Vulnerability Remains Unpatched After Seven Months

Do Son July 15, 2026

The renowned cybersecurity firm Mindgard recently published an expose detailing a high-severity zero-day vulnerability harboring within Cursor,...

Fake AI Assistant: Malicious “ClawdBot” Extension Hides Trojan in VS Code ClawdBot Malware VS Code Trojan

ClawdBot Malware VS Code Trojan

Fake AI Assistant: Malicious “ClawdBot” Extension Hides Trojan in VS Code

Do Son January 29, 2026

The viral popularity of AI coding assistants has attracted a new kind of predator. On January 27,...

Data Disaster: Claude AI Executes rm -rf ~/ and Wipes Developer’s Mac Home Directory Anthropic Claude Code telemetry rollback response and developer community controversy Claude Code human error Claude AI Data Wipe, Constraining AI Tools Anthropic lawsuit, AI copyright Claude Code, web editor

Anthropic Claude Code telemetry rollback response and developer community controversy Claude Code human error Claude AI Data Wipe, Constraining AI Tools Anthropic lawsuit, AI copyright Claude Code, web editor

Data Disaster: Claude AI Executes rm -rf ~/ and Wipes Developer’s Mac Home Directory

Do Son December 16, 2025

An increasing number of developers are turning to AI-assisted tools to streamline their workflows. Yet as adoption...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-50522CVSS 9.8
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Admin intel📅 Updated: Jul 21, 2026
CVE-2026-63030CVSS 9.8
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
Admin intel📅 Updated: Jul 21, 2026
CVE-2026-60137CVSS 5.9
WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
Admin intel📅 Updated: Jul 21, 2026
CVE-2026-6875CVSS 9.5
ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability...
Admin intel📅 Updated: Jul 18, 2026
CVE-2026-39808CVSS 9.8
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
CISA KEV📅 Added to KEV: Jul 16, 2026
CVE-2026-25089CVSS 9.8
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
CISA KEV📅 Added to KEV: Jul 16, 2026
CVE-2026-58644CVSS 9.8
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CISA KEV📅 Added to KEV: Jul 16, 2026
CVE-2023-4346CVSS 7.5
KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to...
CISA KEV📅 Added to KEV: Jul 15, 2026