Feb 09, 2026 • Vulnerability | #DockerDash #RCE #Meta-context Injection

⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More - The Hacker News

A critical-severity vulnerability, named DockerDash, in Docker's Ask Gordon AI assistant allows for Remote Code Execution (RCE) in Docker environments. Thi...

Read Analysis →

Jan 29, 2026 • Vulnerability | #Cleartext storage #Supply chain risk #RCE

One Step Away From a Massive Data Breach: What We Found Inside MoltBot - OX Security

The AI personal assistant MoltBot (OpenClaw) insecurely stores sensitive credentials and API keys in cleartext within `~/.clawdbot` and retains "deleted&qu...

Read Analysis →

Aug 05, 2025 • Vulnerability | #CVE-2025-54136 #RCE #MCPoison

Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval - The Hacker News

CVE-2025-54136, codenamed MCPoison, is a high-severity vulnerability in the Cursor AI code editor that allows for remote code execution (RCE). It exploits how t...

Read Analysis →