AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique
Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval.
The post AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique appeared first on SecurityWeek.
Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges
The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine (“mpengine.dll”), which provides scanning, detection, and cleaning capabilities for its antivirus and
AssuranceAmerica data breach exposes records of 6.9 million drivers
Chrome 150 Update Patches 27 Vulnerabilities
The security refresh resolves 13 use-after-free bugs, including two critical-severity flaws found by Google.
The post Chrome 150 Update Patches 27 Vulnerabilities appeared first on SecurityWeek.
Meta’s New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images
“You can also @-mention Instagram accounts in the Meta AI app to bring specific Instagram profiles right into your images,” the social media giant said in a post.
“Whether you want to design a custom event invitation
8Layers Raises $2.9 Million for Identity Security Platform
The Spanish startup has closed an extended pre-seed funding round two months after launching its digital identity protection platform.
The post 8Layers Raises $2.9 Million for Identity Security Platform appeared first on SecurityWeek.
Microsoft patches RoguePlanet Defender zero-day vulnerability
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls “Friendly Fire.” It works against Anthropic’s Claude Code and OpenAI’s Codex when either is running in an autonomous mode that approves its own
Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices
Tracked as CVE-2026-11405, the vulnerability allows unauthenticated attackers to access a device’s web management interface.
The post Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices appeared first on SecurityWeek.
