Microsoft Copilot for Word Can Copy Hidden Prompts Into New DocumentsThe Hacker News·Jul 30, 11:54 UTC · Jul 30, 2026Exploit / PoC145
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug FlagThe Hacker News·Jun 3, 14:56 UTC · Jun 3, 2026Exploit / PoCCVE-2026-41100CVE-2026-41101CVE-2026-41102+1 CVEs150
TotalRecall shows how easily data collected by Windows Recall can be stolenHelp Net Security·Jun 5, 00:00 UTC · Jun 5, 2024Exploit / PoC45
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo DataThe Hacker News·Jul 7, 14:07 UTC · Jul 7, 2026Exploit / PoC145
New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker CommandsThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Exploit / PoCCVE-2025-32711150
Windows Recall will be opt-in and the data more secure, Microsoft saysHelp Net Security·Jun 7, 00:00 UTC · Jun 7, 2024Exploit / PoC145
Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code ExecutionThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Exploit / PoCCVE-2026-26268CVE-2026-10591150
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running ItThe Hacker News·Jul 9, 05:17 UTC · Jul 9, 2026Exploit / PoCCVE-2026-3986150
Seven Bugs in FatFs Put IoT and Embedded Devices at RiskSecurity Affairs·Jul 6, 10:20 UTC · Jul 6, 2026Exploit / PoCCVE-2026-6682CVE-2026-6683CVE-2026-6687+4 CVEs150