CVE-2025-34291: Your AI Pipeline Is One Browser Visit Away From Full Compromise

Langflow's permissive CORS and a SameSite=None cookie let any web page run arbitrary Python as an authenticated user — no credentials required, active exploitation confirmed.

Malicious VS Code Extension Fuels Major GitHub Breach

Poisoned developer tool allows attackers to exfiltrate and sell 3,800 internal code repositories.

A Stolen Token and an Orphan Commit: How a Supply Chain Attack Hit 2.2 Million Developer Environments Through the VS Code Marketplace

No vulnerability in the extension itself was needed: a stolen publisher token, a hidden orphan commit in the official nrwl/nx repository, and Marketplace trust did the work — confirming that IDE extensions hold direct access to every credential a developer carries.

AI Coding Tools Logged 35 Formally Attributed CVEs in March — and Slopsquatting Turned the First Hallucinated Package Name Into a Live Attack Vector

Georgia Tech's Vibe Security Radar formally attributed 35 CVEs to AI-generated code in March 2026 — up from 6 in January — while a researcher at Aikido Security demonstrated that hallucinated package names reach 237 repositories before any package exists, giving attackers a ready-made supply chain entry point.

CVE-2026-42897: Exchange OWA Zero-Day Is Under Active Exploitation — One Crafted Email Hijacks a Session, No Patch Released Yet.

TrustFall — one "trust this folder" click hands attacker MCP servers full developer privileges across Claude Code, Cursor, Gemini CLI, and Copilot

Adversa AI's May 7 disclosure shows the trust designation in every major AI coding CLI is also an execution grant for attacker-supplied MCP servers, and in CI/CD pipelines the prompt is suppressed entirely — meaning a contributor-grade pull request can reach production secrets without tripping a single audit signal.

The Rewrite Module, the Controller, and the Bot

NGINX Rift surfaces an 18-year-old heap overflow, CISA orders Cisco SD-WAN patched by May 17, and Google disrupts the first AI-assisted zero-day in the wild.

275 Million Records, 8,800 Schools, One Vendor

Eight Canadian universities are in the Canvas breach scope — and ShinyHunters' deletion logs guarantee nothing

TeamPCP Hijacks @tanstack's Own Release Pipeline

Mini Shai-Hulud returns with 169 compromised npm packages — and the first malicious tarballs ever to carry valid SLSA Build Level 3 provenance.

The Week Linux Local Privilege Escalation Got Easy

Dirty Frag, Bleeding Llama, and the Secure Boot certificate deadline now 43 days out