Embedded browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop flawed
Forever Security’s EMBRACE findings show prompt injection, address spoofing, and local file reads; Codex and VS Code were still unpatched.
74
Product
GitHub Copilot
- Mentions · 7d7
- Mentions · 30d34
- All mentions50
- First seenAug 17, 2026
- Last mentioned12h ago
Timeline
50 articles · newest firstEmbedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
74
GitHub launches Copilot Fusion to route and combine coding models
Fusion is generally available on all Copilot plans, bills each model at its normal rate, and offers a 30% discount through November 30, 2026.
48
GitHub launches Copilot Fusion to route coding work across models
Paid Copilot users get a 30% Fusion discount through November 30, 2026, while High and Max can use more credits.
52
GitHub npm package firewall can block new versions before install
Enterprises can set a cooldown, alongside AI Scan, Copilot checks, and Dependabot reachability ranking.
38
Aokigahara stealer takes developer keyrings and AI assistant sessions
Check Point says the Windows malware also steals browser, VPN, wallet, and password-manager data from one endpoint.
56
Aokigahara infostealer collects AI coding-tool tokens and cloud credentials
Check Point says it searches local app storage rather than exploiting a flaw in the targeted AI assistants.
72
Aokigahara infostealer targets browsers, cloud keys, and AI apps
Check Point says the stealer also grabs Claude, ChatGPT Desktop, Codex, Cursor, and cloud and Git credentials.
72
Fake AI apps steal credentials and plant malware, ANY.RUN says
Researchers tied 1,258 public sandbox analyses from April 15 to October 5 to campaigns impersonating popular AI brands.
58
Microsoft adds dynamic permissions and risk scores for AI agents
Project Perception now starts agents with minimal access and can isolate or halt high-risk runtimes.
46
Microsoft announces Guardian Agents to constrain AI agent permissions
Discovery now covers 60 local agent types, and risk signals can revoke access or stop an agent.
62
Microsoft extends Project Perception to secure AI agents as insiders
Discovery grows to 60 local agent types, and Entra Agent ID can cover agents found only through sensors.
52
AI Can Write the Code. Who Verifies It?
A Faros study and tooling survey say AI coding raises bugs and incidents unless automated verification keeps pace.
48
New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials
Symantec says infostealer Aoki now steals local sessions and credentials for ChatGPT, Claude, Codex, Cursor, and Gemini.
60
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
Aoki infostealer now steals Claude, ChatGPT, Cursor, Copilot, and Gemini credentials from developer machines.
58
New Aoki Infostealer Targets AI Coding Assistant Credentials
Symantec says the Aoki infostealer now steals API keys and sessions from AI coding assistants.
66
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers impersonate Claude, ChatGPT, Copilot, and Gemini to deliver infostealers, ANY.RUN reports.
58
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.
22
Fake AI Tools Put US Companies at Risk: Inside Counterfeit Claude, ChatGPT, and Copilot
ANY.RUN linked 1,258 fake Claude and ChatGPT lures delivering infostealers and phishing US users.
67
[AINews] AI Engineer NYC: Gemini 4 Argon, Vals AI Benchmarks
Google made Gemini 4 Argon generally available, with independent benchmarks placing it near rival frontier models.
90
All Systems Go: Global PC App Ecosystem Ready for NVIDIA RTX Spark
NVIDIA prepares RTX Spark PCs for an Oct. 16 launch with local AI agents and Nemotron 3.5 Bolt 74B.
74
Microsoft plans to scale its own Maia AI chips to gigawatt levels by 2027
Microsoft plans multi-gigawatt Azure Maia deployments from 2027 as its main inference platform.
74
Microsoft’s new AI chip makes it less reliant on Nvidia’s GPUs
Microsoft unveiled Maia 300, an in-house chip planned as Azure's primary AI inference system in 2027.
74
How one bug bounty researcher chooses the features they investigate
GitHub profiles VIP bug bounty researcher @vaib25vicky and higher payouts for quality findings.
18
Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)
SANS published two Python scripts that reconstruct OpenCode and Hermes AI agent activity for forensic review.
44
GitHub AI Can Spot Passwords Hidden in Code Before Developers Push Them
GitHub is previewing a ModernBERT classifier that blocks hidden passwords during pushes, beyond pattern-based scanning.
48
GitHub adds AI to catch passwords before a code push
GitHub is adding a ModernBERT classifier to push protection to block unstructured passwords before they enter repositories.
51
[AINews] Claude Haiku 5.5 — better than GPT-6 Luna at the same pricing
Anthropic released Claude Haiku 5.5, a cheaper small model priced to match GPT-6 Luna.
78
Meta and Microsoft Limit Employee Use of Claude AI Tools
Microsoft and Meta are limiting employee use of Anthropic's Claude in favor of their own coding tools.
60
Meta and Microsoft Reduce Internal Use of Claude AI
Meta and Microsoft are cutting internal Claude use while pushing their own coding assistants.
48
Meta and Microsoft are Actively Cutting Employee Use of Claude AI
Meta and Microsoft are cutting employees' Claude use while steering staff to their own coding tools.
52
GitHub’s ReviewBench puts AI code reviewers to the test
GitHub launched ReviewBench, a 219-pull-request benchmark for testing AI code-review agents.
46
Meta and Microsoft pull back from Claude as Anthropic transforms from partner into competitor
Microsoft and Meta are sharply cutting internal Claude use as Anthropic becomes a competitor.
66
GitHub's new dashboard experience now the default
GitHub's redesigned dashboard is now the default, combining agent sessions, issues, and pull requests with Copilot actions.
18
GitHub AI Security Agent Finds 24 Android Vulnerabilities Including Account Takeover Flaws
GitHub’s AI security agent found 24 Android flaws, including OsmAnd tracking and Wikipedia account takeover.
64
How we found 24 Android vulnerabilities using our open source AI security agent
GitHub Security Lab’s AI taskflows uncovered 24 Android bugs, including OsmAnd location tracking.
61
AI Coding Agents for Enterprise: IP Indemnity, Data Residency and 500-Seat Cost Compared
Enterprise comparison finds Copilot and Kiro indemnify generated code, while Cognition's Devin terms exclude outputs.
36
Microsoft thinks its new Copilot ‘super app’ will be as influential as Office
Microsoft unveiled a Copilot super app bundling chat, coding, and Autopilot agents with usage-based enterprise billing.
72
Growing the WIN AI Ecosystem with Agent Integrations
Wiz made its WIN partners MCP endpoint generally available so partner agents can pull live security context.
34
Microsoft agentically ports Copilot runtime to Rust for $120K
Microsoft rewrote its GitHub Copilot runtime from TypeScript to Rust using AI agents, converting 430,000 lines for about $120,000 in tokens.
55
Related CVEs
by mentions- CVE-2025-5953626%8.7Code Injection in Anthropic Claude Code Startup Trust Dialog (pre-1.0.111)
- CVE-2026-2185225%5.3API Key Exfiltration via Attacker-Controlled Base URL in Anthropic Claude Code
Appears with
- Microsoftvendor · 28
- GitHubvendor · 25
- Anthropicvendor · 21
- OpenAIvendor · 20
- Claude Codeproduct · 18
- Codexproduct · 16
- GitHuborganization · 15
- Microsoftorganization · 15
- Googlevendor · 12
- Anthropicorganization · 11
- Cursorproduct · 11
- OpenAIorganization · 11
- Claudeai model · 11
- Gemini CLIproduct · 10
- Claudeproduct · 7
- Windsurfproduct · 5
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.