Cryptographic Context Injection Comes for the Coding Agent: Stealing Developer Secrets from GitHub Copilot CLI6 October 2026·4 minsSecurity Research Cryptographic Context Injection Prompt Injection Data Exfiltration Coding Agents GitHub Copilot
Swipe, Match… Leak: Unauthenticated Phone-Number Exposure in the InPerson Dating App25 August 2026·8 minsSecurity Research Broken Access Control PII Exposure Web Security
Cryptographic Context Injection: Zero-Confirmation Data Theft from Grok20 August 2026·4 minsSecurity Research Cryptographic Context Injection Prompt Injection Data Exfiltration AI Security Grok
DeepJack: a 1-click deeplink RCE in Cursor via a lying MCP-install dialog15 July 2026·2 minsSecurity Research DeepJack RCE MCP Cursor Coding Agents
SymJack: the approval prompt is lying to you. A symlink-hijack RCE in five AI coding agents26 May 2026·2 minsSecurity Research SymJack RCE MCP Cursor Coding Agents
TrustFall: Coding Agent Security Flaw Enables One-Click RCE7 May 2026·2 minsSecurity Research TrustFall RCE MCP Cursor Coding Agents
Dreadnode Probe 2: Reverse-Engineering a Scoring Algorithm to Extract a Hidden System Prompt12 March 2026·6 minsSecurity Research Prompt Injection CTF AI Security
Cryptographic Payload Injection: A Novel Jailbreak Technique Against Gemini11 March 2026·9 minsSecurity Research Prompt Injection AI Security Gemini
The Ghost in the Tenant: Chaining SVG UI Redressing and Persistent Authorization for Stealth Account Takeover5 February 2026·4 minsSecurity Research UI Redressing Broken Access Control Web Security
Predictable Voucher Identifier Enumeration in Cibus (Victory Integration)28 January 2026·6 minsSecurity Research Enumeration Business Logic Supply Chain Web Security
Exploiting Layout Logic for DOM-Based XSS in react-show-more-text20 January 2026·6 minsSecurity Research XSS Supply Chain Web Security
The Trust Fall: Bypassing a City-Wide Payment Ecosystem12 January 2026·8 minsSecurity Research Business Logic Phishing Web Security
How an Unpatched XSS vulnerability in a React Library Exposed Corporate Data, Employee Credentials, and Financial Assets28 December 2025·10 minsSecurity Research XSS Supply Chain Data Exfiltration Web Security
Exposing Top Secret IDF Documents: The Danger of Improper Digital Redaction5 November 2025·2 minsSecurity Research Redaction Failure PII Exposure
Breaking the Paywall: How a 'Lazy' Search Implementation Compromised a Paywall23 March 2025·5 minsSecurity Research Broken Access Control Business Logic Enumeration Web Security
The 1-Shekel Ticket: Broken Access Control, Mass PII Exposure, and Price Manipulation in a Concert Ticketing Platform17 September 2024·4 minsSecurity Research Broken Access Control PII Exposure Business Logic Web Security
Reverse Engineering a 3D Unity Web App to Win a Chocolate Contest21 July 2024·8 minsSecurity Research Reverse Engineering Game Hacking Web Security
