The Daily Index — Friday, August 8, 2025

ATTACKS & VULNERABILITIES

TLDR InfoSec

VIBE CODING TOOL CURSOR'S MCP IMPLEMENTATION ALLOWS PERSISTENT CODE EXECUTION

Check Point researchers uncovered a new remote code execution vulnerability in Cursor. The vulnerability, dubbed MCPoison, is caused by Cursor allowing an MCP configuration that has been previously approved to be updated without requiring a new approval. In this attack, an attacker could introduce a benign MCP and then, once it's approved, modify it to perform RCE or other malicious activity.

theregister.com · 2 min

TLDR InfoSec

CRITICAL ZERO-DAYS CRACK OPEN CYBERARK AND HASHICORP PASSWORD VAULTS

A team of researchers discovered nine zero-days in HashiCorp Vault and five in CyberArk Conjur, which they were able to chain to achieve RCE against both platforms. The researchers discovered that they could trick Conjur into performing authentication against their own server instead of an AWS server and then escalate privileges by authenticating as a policy instead of a user. Conjur's “Policy Factory” also allows for embedding Ruby in policies, leading to RCE. The HashiCorp Vault vulnerabilities included username enumeration, authentication lockout bypasses, MFA and certificate authentication bypasses, and a privilege escalation from admin to root, which could allow for RCE.

links.tldrnewsletter.com · 5 min

TLDR InfoSec

PROMPT INJECTION ENGINEERING FOR ATTACKERS: EXPLOITING GITHUB COPILOT

This post demonstrates a prompt injection attack against GitHub Copilot, where attackers file malicious issues with hidden prompts in HTML `picture` tags, causing Copilot to insert backdoors when assigned to implement fixes. The attack leverages fake conversation history to manipulate the AI agent into secretly executing a malicious bash script disguised as a “security setup,” ultimately installing backdoored dependencies that accept commands via HTTP headers. The technique exploits Copilot's inability to distinguish legitimate from injected XML tags. Maintainers rarely scrutinize package lock file modifications during code review.

blog.trailofbits.com · 10 min

TLDR InfoSec

WHY IS PREVENTATIVE SECURITY SO DIFFICULT?

While tools for detecting vulnerabilities are plentiful, there are very few tools that seek to preventively eliminate full classes of vulnerabilities. Preventative tooling is complex because often big tech giants are the only ones equipped with the resources to address the root causes, but they are not incentivized to aid their competitors, environments differ, and new standards struggle to garner support. AI tooling may aid in allowing for more catered automations, but it is unlikely to fully eliminate issues.

kanenarraway.com · 10 min

TLDR InfoSec

RESEARCHERS DESIGN “PROMPTWARE” ATTACK WITH GOOGLE CALENDAR TO TURN GEMINI EVIL

Researchers demonstrate a “promptware” attack using malicious Google Calendar events to manipulate Gemini AI into controlling smart home devices. The exploit uses indirect prompt injection via calendar descriptions, triggering real-world actions. Google has now patched the flaw, adding protections and confirmation dialogs for sensitive actions.

arstechnica.com · 4 min

TLDR InfoSec

DROPZONE (PRODUCT LAUNCH)

Dropzone AI's agents can collect information from third-party Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), Endpoint Detection and Response (EDR), and cloud security tools such as Microsoft Defender, Splunk, CrowdStrike, and AWS Security Hub.

dropzone.ai

TLDR InfoSec

HACKER EXTRADITED TO US FOR STEALING $3.3 MILLION FROM TAXPAYERS

Nigerian national Chukwuemeka Victor Amachukwu was extradited from France to face charges for spearphishing attacks on U.S. tax preparation businesses between 2019 and 2021. The attacker stole personal data to file fraudulent tax returns and SBA loan applications, netting $2.5 million in tax refunds and $819,000 in loans from a total $3.3 million in damages. Amachukwu faces six federal charges, including conspiracy to commit computer intrusions, wire fraud, and aggravated identity theft, with potential sentences up to 20 years per count.

bleepingcomputer.com · 3 min

TLDR InfoSec

RESEARCHERS UNCOVER ECSCAPE FLAW IN AMAZON ECS ENABLING CROSS-TASK CREDENTIAL THEFT

“ECScape” is a flaw in Amazon ECS on EC2 that allows low-privilege containers to steal credentials from higher-privilege tasks on the same instance, enabling privilege escalation and lateral movement. Amazon advises isolating tasks, using AWS Fargate for true separation, and enforcing least-privilege policies to mitigate risks.

links.tldrnewsletter.com · 3 min

TLDR InfoSec

'SAMOURAI' CRYPTOMIXER FOUNDERS PLEAD GUILTY TO MONEY LAUNDERING

The founders of Samourai Wallet, a cryptocurrency mixer, pleaded guilty to laundering over $200 million through their service, which used features like Whirlpool and Ricochet to obscure illicit transactions. They face prison time and must forfeit more than $200 million for their actions.

links.tldrnewsletter.com · 2 min

TLDR InfoSec

NETWORK SCANS FIND LINUX IS GROWING ON BUSINESS DESKTOPS, LAPTOPS

Lansweeper reports Linux usage on business endpoints grew from 1.6% to 1.9% from January to June across 18.5 million devices driven primarily by security hardening concerns and DevOps activities rather than Windows 10 end-of-life.

theregister.com · 4 min

TLDR InfoSec

JAPAN: APPLE MUST LIFT BROWSER ENGINE BAN BY DECEMBER

Japan's Mobile Software Competition Act guidelines require Apple to lift its iOS browser engine ban by December, prohibiting both direct blocks and technical restrictions that make third-party engines impractical while mandating API access equivalent to Safari.

open-web-advocacy.org · 5 min

TLDR InfoSec

AIR FRANCE, KLM SAY HACKERS ACCESSED CUSTOMER DATA

Air France and KLM experienced a data breach through a third-party customer service platform that exposed customer names, contact details, and loyalty program numbers (but not passwords, passports, or payment data), prompting warnings about potential phishing attacks.

securityweek.com · 2 min