Weekly CISO Digest — Week of 2026-07-06: Cursor AI Editor Zero-Day Exploits

Headline Incident: Critical Cursor AI Code Editor Flaws Lead to OS-Level Remote Code Execution

Two critical vulnerabilities (CVE-2026-50548 and CVE-2026-50549) were discovered in the Cursor AI code editor, enabling attackers to execute arbitrary code on the host OS by bypassing the IDE sandbox via prompt injection. These zero-day flaws allowed remote code execution at the operating system level, presenting a severe risk to developer endpoints globally. The vulnerabilities were privately reported and Cursor issued patches in version 3.0 on April 2, 2026. Organizations using Cursor AI prior to v3.0 remain exposed to exploitation. Immediate patching is essential as threat actors are actively probing for unpatched systems. This incident underscores the risk of AI-powered developer tools as a new attack surface for code execution and supply chain compromise.

This Week's Incidents

ICAI BoS Portal Data Breach Announcement

What: On July 5, 2026, the Institute of Chartered Accountants of India (ICAI) disclosed a breach of its BoS Portal, exposing student records and exam data.
Who's at risk: Education sector and student data in Asia-Pacific.
Action: Audit access logs and notify affected individuals; review portal security controls.

Kerberos Reflection Vulnerability CVE-2026-26128 Disclosed

What: CVE-2026-26128, a new Kerberos authentication protocol flaw, allows reflection attacks that can compromise authentication.
Who's at risk: Organizations using Kerberos-based authentication globally.
Action: Monitor for vendor patches and review Kerberos configurations for exposure.

Medtronic Notifies 3.8 Million After ShinyHunters Data Breach

What: Medtronic confirmed a breach by ShinyHunters, exposing personal and medical data of 3.8 million individuals between April 13–19, 2026.
Who's at risk: Healthcare sector, Medtronic customers in North America.
Action: Notify affected individuals, enhance monitoring for identity theft, and review third-party access.

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion

What: Union County, Ohio, paid $1 million in bitcoin to the Kairos group to prevent leak of stolen sensitive files after a data theft extortion attack.
Who's at risk: U.S. government entities and public sector organizations.
Action: Review incident response playbooks for extortion-only attacks and strengthen data exfiltration monitoring.

North Korean Hackers Deploy 108 Malicious Packages in PolinRider Campaign

What: North Korean threat actors published 108 malicious packages and extensions across npm, Packagist, Go, and Chrome, infecting developer environments via compromised maintainer accounts.
Who's at risk: Software supply chain, open-source maintainers, and developer teams globally.
Action: Audit dependencies, monitor for malicious package indicators, and enforce MFA for repository access.

LastPass Data Breach via Third-Party Supplier Klue

What: A breach at Klue compromised LastPass customer CRM data, including names, emails, and phone numbers, via stolen OAuth tokens used to access Salesforce.
Who's at risk: LastPass, Klue, and customers of affected SaaS vendors globally.
Action: Revoke OAuth tokens, notify impacted customers, and review third-party integrations.

Microsoft 365 Accounts Targeted in Large-Scale Password Spray Attack Affecting Huntress Customers

What: Automated password spray attacks targeted Microsoft 365 users, compromising at least 78 Huntress customer accounts from 81 million login attempts using exposed credentials and MFA weaknesses.
Who's at risk: Microsoft 365 tenants and organizations with weak MFA globally.
Action: Enforce strong MFA, monitor for password spray activity, and review OAuth ROPC flow usage.

Verified X ad spreads Mac malware and ConsentFix steals Microsoft accounts

What: A verified ad on X delivered Atomic Stealer malware to Mac users, while ConsentFix phishing campaigns stole Microsoft 365 tokens via browser interaction.
Who's at risk: Mac users and Microsoft 365 users active on X platform.
Action: Block malicious domains, educate users on social engineering, and monitor for token theft.

North Korea-Linked Malicious npm Packages Steal Developer Secrets

What: North Korean actors released npm packages mimicking Rollup tooling to steal developer secrets and enable remote access, targeting CI environments and workstations.
Who's at risk: Developer teams using npm, especially in organizations like JFrog, Panther, AWS.
Action: Audit npm dependencies, block known malicious packages, and monitor for suspicious outbound connections.

Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation

What: Qilin ransomware-as-a-service listed nearly 1,500 victims in the past year, filling the void after LockBit and RansomHub disruptions, and targets U.S. organizations via phishing and vulnerability exploits.
Who's at risk: U.S. enterprises and critical infrastructure.
Action: Review ransomware defenses, patch exposed systems, and increase phishing awareness.

European Parliament Member Investigating Spyware Hacked with Pegasus

What: Former MEP Stelios Kouloglou was repeatedly targeted with Pegasus spyware via a zero-click Apple HomeKit exploit, compromising confidential EU committee data.
Who's at risk: Government officials, investigative committees, and Apple device users.
Action: Update Apple devices, monitor for Pegasus indicators, and review mobile device security policies.

PamStealer macOS Infostealer Uses Fake Maccy Sites and PAM Checks to Steal Passwords

What: PamStealer, a new macOS infostealer, impersonates the Maccy app and uses fake sites to steal passwords and wallet data via PAM validation.
Who's at risk: macOS users, especially those seeking clipboard utilities.
Action: Block known malicious domains, educate users on app authenticity, and monitor for suspicious binaries.

Medtronic Data Breach Impacts 3.8 Million People

What: ShinyHunters accessed Medtronic’s IT systems, stealing personal and health data of over 3.8 million individuals, including SSNs and medical info.
Who's at risk: Medtronic customers and healthcare sector in North America.
Action: Notify affected individuals, enhance data loss prevention, and review incident response plans.

LastPass impacted by third-party supplier data breach

What: Attackers exploited stolen OAuth tokens at Klue to access LastPass customer CRM data stored in Salesforce, exposing contact and support details.
Who's at risk: LastPass, Klue, and their enterprise customers in North America.
Action: Rotate OAuth credentials, notify customers, and audit third-party SaaS access.

North Korea-Linked npm Packages Steal Developer Secrets

What: North Korean threat actors released layered npm packages to steal developer credentials and source code, targeting CI/CD pipelines and workstations.
Who's at risk: Organizations using npm, including JFrog, Panther, SafeDep, Checkmarx, AWS.
Action: Audit npm dependencies, block malicious packages, and monitor for credential exfiltration.

This Week's Pattern

• Supply chain and third-party attacks surged, with multiple incidents involving npm, Klue, and open-source repositories (Cursor AI, North Korean campaigns).
• Data breaches and extortion attacks remain high-impact, affecting healthcare (Medtronic), government (Union County, Ohio), and SaaS (LastPass) sectors.
• Attackers are exploiting authentication weaknesses (Kerberos, Microsoft 365 MFA, OAuth tokens), highlighting the need for robust identity and access management across the enterprise.