Microsoft product teams and the Microsoft Security Response Center (MSRC) collaborated on a technical analysis of vulnerabilities related to AI in Microsoft Word. The findings reveal potential security risks associated with AI integration in word processing software.

Cursor IDE executes malicious git.exe files from the root of a project repository without user interaction or prompts. This vulnerability allows repeated execution of the planted malicious file, posing a significant security risk.

Wiz Research identified a critical vulnerability (CVE-2026-3854) in GitHub's internal git infrastructure that allows authenticated users to execute arbitrary commands on backend servers with a single git push command. This vulnerability is notable as one of the first critical flaws found in closed-source binaries using AI.

AISLE has identified 38 critical vulnerabilities (CVEs) in healthcare software utilized by 100,000 medical providers. The rapid digitization of healthcare is outpacing the implementation of adequate security measures.

A Lovable-hosted app reportedly exposed the data of 18,000 users due to 16 identified vulnerabilities, including six deemed critical. Lovable asserts that users are responsible for addressing security issues flagged prior to app publication.