ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
A weekly bulletin aggregating short security updates, including the City-Forum data-theft campaign, a ShipMonk breach, a Cursor CLI flaw, and GhostJacking AI attacks.
The Hacker News ThreatsDay Bulletin bundles roughly 20 short updates across cloud services, AI tools, malware, breaches, and scams. Highlights include the City-Forum campaign pulling data from unauthenticated guest access in Salesforce Experience Cloud and ServiceNow Service Portals since March 2025, and a ShipMonk breach exposing Trezor customer order data for orders in seven countries between May 10 and August 8, 2026. Other items cover a patched Cursor CLI flaw that let cloned repositories run commands before the workspace-trust prompt, Okta's analysis of the Work Panel vishing console used by actors like UNC6671, and GhostJacking AI agent hijacking via a patched Claude Desktop sandbox escape. Meta also launched an on-device WhatsApp Scam Alert machine learning model that keeps message content on the device.
- City-Forum targets unauthenticated guest access in Salesforce Experience Cloud and ServiceNow portals
- ShipMonk breach exposed Trezor customer names, addresses, phone numbers, and emails
- Cursor CLI flaw ran commands before trust prompt; patched three days after July 20 disclosure
- GhostJacking hijacks AI agents via poisoned logs to pivot to cloud infrastructure
- Meta's WhatsApp Scam Alert uses on-device ML without sending content off device
- Products
- Salesforce Experience CloudServiceNow Service PortalCursor CLIClaude DesktopWhatsAppWork Panel
- Threat actors
- UNC6671Cordial Spider
- Organizations
- The Hacker News
From the original article
13 min read at thehackernews.com
Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of them, covering cloud services, AI tools, malware, data breaches, scams, and new attack methods.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.