ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of them, covering cloud services, AI tools, malware, data breaches, scams, and new attack methods. The latest ThreatsDay Bulletin puts all of these short updates in one place, so you can quickly catch up on what happened, what changed, and what security teams

According to the article, a new GhostJacking attack class expands on Agentjacking to trick AI agents into running arbitrary code on developer machines by abusing poisoned logs or alerts, and can pivot into enterprise cloud infrastructure, exfiltrate data via a now-patched Claude Desktop sandbox escape, and establish persistence in agent configuration[1]. The same bulletin highlights a Cursor CLI coding agent flaw where cloned repositories could execute arbitrary commands on a developer’s machine before trust prompts and even outside an explicitly enabled sandbox, allowing access to SSH keys and cloud credentials[1]. RealGround analysis: these incidents show high-risk abuse of autonomous and semi-autonomous AI agents in developer and cloud workflows, underscoring the need for hardened agent architectures, strict workspace-trust and sandbox enforcement, and continuous adversarial testing of AI-assisted tooling to prevent arbitrary code execution and data exfiltration.