A Cursor zero-day vulnerability lets a planted git.exe run automatically when a Windows developer opens a repository. Mindgard disclosed it after seven months of silence from Cursor.

Cursor’s Unpatched Zero-Day Lets a Fake git.exe Hijack Any Windows Developer on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

A researcher found that anyone with physical access to one Shark robot vacuum can extract its AWS IoT certificate and use it to take over other Shark vacuums region-wide, with no patch yet available.

Shark Vacuum Vulnerability Lets Attackers Hijack Cameras Across an Entire AWS Region on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

A heap-based buffer overflow in 7-Zip's XZ decoder, patched in version 26.02, let a crafted archive run code on extraction and had gone unnoticed for five years.

CVE-2026-14266: Inside the 7-Zip Heap Overflow Hiding in XZ Archives Since 2021 on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Adobe frames the fast exploitation of its ColdFusion vulnerabilities as an attacker speed problem. The real issue is a connector that never should have trusted an unauthenticated request.

Adobe ColdFusion Vulnerabilities Are a Design Failure, Not Bad Luck on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the first exploitation attempts 13 days after the fix shipped.

Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896 on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.