NewsThe Register — Security
Researcher shows how Claude Code can be tricked simply by asking it to summarize a website
Teaser from the source
More prompt-injection hijinks from wunderwuzzi
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on Researcher
Other advisories
- Highpwn_watch:tailscale-tailworm-ssh-forwarding-privescTailworm: researcher drops 11 Tailscale and headscale flaws; Tailscale 1.104.4 fixes the SSH forwarding root escalation
- CriticalCVE-2025-65720GPT Researcher MCP STDIO configuration allows remote command execution
- MediumCVE-2026-50022Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-con…
- CriticalCVE-2026-37006A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malici…
- CriticalCVE-2026-37006Eine Schwachstelle im WebSocket-Endpunkt von gpt-researcher v0.
- CriticalCVE-2026-48528Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticate…
- CriticalCVE-2026-47754Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19.1 and all 1.x versions contain an un…
- CriticalCVE-2025-65720GPT Researcher MCP STDIO configuration allows remote command execution
Other news entries
- Thousands of GitHub repos hit with secret-stealing malwareNewsCSO Online
- Windows 0-day dropped by disgruntled researcher hands hackers System rightsNewsArs Technica — Security
- New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedNewsBleepingComputer
- New Windows SignDrop zero-day gives hackers SYSTEM privilegesNewsBleepingComputer
- 186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search HijackersNewsThe Hacker News
- AI found Linux kernel bugs that remained undetected for decadesNewsCSO Online
- Hackers Target N-central Zero-Days as N-able Rushes PatchesNewsSecurityWeek
- AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production SecretsNewsThe Hacker News
ID