#AI Tools
All CosmicBytez Labs articles tagged #AI Tools, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-68771: ComfyUI Unsafe Pickle Deserialization Enables Unauthenticated RCE
ComfyUI v0.23.0 contains a critical unsafe deserialization vulnerability in the LoadTrainingDataset node. Unauthenticated attackers can upload a crafted...
- News
2-Click Cursor Exploit Enables Dev Environment Takeover
DeepJack: two clicks in Cursor IDE silently installs a malicious MCP server with full user privileges, stealing source code and secrets. Unpatched in July 2026.
- News
CISA Orders Feds to Prioritize Patching Langflow Auth Bypass Flaw
CISA added CVE-2026-55255, a CVSS 9.9 IDOR authorization bypass in Langflow, to its Known Exploited Vulnerabilities catalog on July 7, ordering U.S....
- Project
Claude Code for IT Operations: Building a Multi-Project
Transform Claude Code from a chatbot into a DevOps co-pilot. Set up CLAUDE.md templates, custom hooks, reusable agents, deployment skills, and MCP server...
- News
Trojanized MCP Server Deploys StealC Infostealer Targeting
A SmartLoader campaign distributes a trojanized Model Context Protocol (MCP) server disguised as Oura Health's legitimate tool, deploying StealC...