2-Click Cursor Exploit Enables Dev Environment Takeover

Source: Dark Reading

Researchers found that Cursor AI could be abused through disguised links that install malicious MCP servers inside a developer environment. The attack chain relies on ordinary-looking clicks and limited warning visibility, creating a path to steal source code, secrets, or run commands with the developer’s privileges.

Link to article

GigaWiper Lets Threat Actors Choose Their Own Destructive Attack

Source: Dark Reading

GigaWiper combines backdoor access with modular destructive payloads, including disk wiping, fake ransomware, and system sabotage. Researchers say the malware lets attackers conduct reconnaissance, maintain control, and decide when to trigger disruption, making early detection of command traffic and pre-destruction behavior especially important.

Link to article

Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown

Source: BleepingComputer

Progress confirmed that a high-severity ShareFile Storage Zone Controller zero-day prompted its emergency shutdown of affected customer-managed servers. The flaw allows authenticated administrators to read files, write attacker-controlled content, and enumerate server file systems. Progress says patches are available and reports no confirmed customer breach.

Link to article

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

Source: The Hacker News

CISA added two critical Joomla extension vulnerabilities to its Known Exploited Vulnerabilities catalog after reports of zero-day exploitation. The iCagenda and Balbooa Forms flaws allow unauthenticated file uploads that can lead to PHP code execution, web shells, and full site compromise if administrators do not patch quickly.

Link to article

Centers Laboratory Data Breach Affects 540,000 Individuals

Source: SecurityWeek

Centers Laboratory disclosed a healthcare data breach affecting 540,000 people after the WorldLeaks extortion group claimed it stole 720 GB of data. The incident highlights continued pressure on healthcare service providers, where sensitive patient information and operational dependency make breach response, notification, and vendor oversight especially critical.

Link to article