Tag: vulnerability

All the articles with the tag "vulnerability".

• SalesBleed: Salesforce Patched the Same Agentforce Hole Twice

  25 Sep, 2026

  Zenity Labs bypassed the Trusted URLs control Salesforce built a year ago to stop prompt injection in Agentforce, then used a Slack agent action to send phishing replies with no attribution. All three bugs are fixed.

• [AUTO] MemTensor Worm Exploits GitHub Actions Token Interception

  23 Sep, 2026

  A MemTensor compromise weaponized GitHub Actions to steal publishing tokens and spread as a self-replicating worm via stolen credentials.

• [AUTO] Bifrost Gateway's Credential Problem

  23 Sep, 2026

  A critical RCE in Bifrost exposes every connected LLM provider's credentials.

• [AUTO] Meta Muse's Undocumented Microphone Backdoor

  22 Sep, 2026

  An undocumented setting in Meta's Muse lets local attackers intercept voice data without privilege escalation.