ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Cursor”

4 stories in the last 24h

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI industry 1AI safety & security 1AI tools & infra 1Malware 1
SeverityAllcritical 0high 0medium 1low 0info 3

Meta now lets AI agents handle the boring parts of WhatsApp Business setup

Meta launched a WhatsApp Business Tools MCP server that lets AI agents like Claude or Cursor set up and manage WhatsApp Business messaging accounts.

Meta announced a WhatsApp Business Tools MCP server, a Model Context Protocol server that connects AI coding agents such as Claude, Cursor, Codex, or ChatGPT directly to the WhatsApp Business Platform. The agents can handle account creation, phone number verification, Cloud API registration, Terms of Service checks, messaging template creation/editing, and webhook testing. Meta's companion Social Technologies MCP can also discover API endpoints, search documentation, and troubleshoot errors. The launch extends Meta's existing MCP servers for ad management and app configuration monitoring.

TechCrunch · AI · 15h agoAI tools & infra

PAPERMILL Malware Campaign Abuses Signed Notepad++ to Deliver VenomRAT to Windows Users

JUMPSEC tracks PAPERMILL, a China-nexus phishing campaign using a signed Notepad++ binary, libcurl.dll sideloading, and Donut loaders to deploy VenomRAT against Indian tax-audit targets.

PAPERMILL delivers ISO disk images via tax-audit phishing emails that passed SPF, DKIM, and DMARC, containing a renamed Authenticode-signed Notepad++ executable and a malicious libcurl.dll that proxies curl functions while executing loader logic in DllMain. The chain uses Mark-of-the-Web bypasses, anti-sandbox sleeps, UAC elevation prompts, Registry persistence, and a Donut shellcode loader to reflectively load .NET VenomRAT v6.0.3 with HVNC and credential-stealing capability, with C2 at 154.36.188.201:4449. JUMPSEC assesses the campaign as China-nexus, financially motivated, and Silver Fox-adjacent rather than definitively Silver Fox-operated.

GBHackers · 2h agoMalware in the wild

AI labs have a data trust problem that their policies haven't solved

Nvidia, Palantir, and Booz Allen restrict Anthropic's Fable over data-retention distrust, exposing gaps in AI labs' customer data policies.

Nvidia limits Anthropic's Fable to non-sensitive work and runs its own Nemotron models for internal tasks, while Palantir blocks Fable deployment until Anthropic grants irrevocable zero-data-retention guarantees, and Booz Allen bans it for proprietary cybersecurity work. John Schulman and researcher Sarah Hooker explain that labs can still extract customer IP from metadata, user traces, and synthetic data even under zero data retention. The trust crisis crystallized around Tristan Buckmaster's accusation that OpenAI's Codex absorbed his Navier-Stokes drafts, though OpenAI later stated his prompts could not have influenced its model.

The Decoder · 18h agoAI industry

Early Anthropic hire, former METR COO have found a way to rein in rogue AI agents

Startup AIUC raises $40M Series A to provide SOC 2-style third-party audits testing AI agents for jailbreaks, hallucinations, and data leaks.

Artificial Intelligence Underwriting Company (AIUC), founded by early Anthropic employee Rune Kvist and former METR COO Rajiv Dattani, announced a $40 million Series A led by Ribbit Capital, bringing total funding to $55 million. Its AIUC-1 standard and testing service runs AI agents through roughly 5,000 tests covering jailbreaks, hallucinations, and data leaks, producing a roughly 100-page audit report verified by humans. Customers include Cursor, Lovable, Harvey, and ElevenLabs.

TechCrunch · AI · 23h agoAI safety & security